Google Professional Cloud Network Engineer Question 494
Select 3Google Cloud PlatformYour organization has deployed an application behind a Google Cloud Load Balancer. To prevent malicious bot traffic from overwhelming your application, you need to configure bot management using Cloud Armor. Which steps should you take to implement bot management effectively?
- A
Create a Cloud Armor security policy and enable the preconfigured WAF rule for bot management.
- B
Attach the Cloud Armor security policy to the backend service of your Load Balancer.
- C
Customize the bot management rule to allow all traffic from specific IP ranges.
- D
Enable Identity-Aware Proxy (IAP) to block bot traffic at the application layer.
- E
Configure rate limiting in Cloud Armor to restrict excessive traffic from problematic IP addresses.
Show answer and explanation
Correct answers: A, B, E
Explanation
To configure bot management in Google Cloud, you should use Cloud Armor's preconfigured WAF rules for bot management, attach the security policy to your Load Balancer's backend service, and optionally configure rate limiting to mitigate excessive traffic from bots. These steps ensure that malicious bot traffic is effectively identified and mitigated before it reaches your application.
- A. Correct.
Correct: Cloud Armor provides a preconfigured WAF rule specifically for bot management. Enabling this rule helps identify and block malicious bot traffic.
- B. Correct.
Correct: To apply the bot management rules, you need to attach the Cloud Armor security policy to the backend service of your Load Balancer.
- C. Incorrect.
Incorrect: Allowing all traffic from specific IP ranges does not address bot management effectively and may unintentionally permit malicious bot traffic.
- D. Incorrect.
Incorrect: While Identity-Aware Proxy (IAP) is useful for securing application access, it is not designed for bot management. Cloud Armor is the appropriate solution for this scenario.
- E. Correct.
Correct: Rate limiting in Cloud Armor can help prevent excessive traffic from specific IP addresses, which is a common characteristic of bot attacks.