Google Professional Cloud Network Engineer Question 497
Single answerGoogle Cloud PlatformYour organization uses Google Cloud and wants to enhance its network security posture by proactively defending against known threats. You are tasked with implementing a solution that leverages Google Threat Intelligence to block traffic from malicious IPs based on real-time threat data. Which approach should you use?
- A
Use Google Cloud Armor with preconfigured WAF rules to block traffic from malicious IPs.
- B
Enable VPC Service Controls to restrict malicious IP traffic.
- C
Create a custom firewall rule in Google Cloud to block traffic from known malicious IPs.
- D
Leverage Google Cloud Armor's Threat Intelligence feature to block traffic from known malicious IPs.
Show answer and explanation
Correct answer: D
Explanation
To proactively defend against malicious traffic using Google's up-to-date threat data, you should use Google Cloud Armor's Threat Intelligence feature. This feature integrates with Google's Threat Intelligence to dynamically block traffic from known malicious IPs, providing an effective approach to enhance your network security posture.
- A. Incorrect.
Google Cloud Armor with preconfigured WAF rules provides protection against web application vulnerabilities but does not specifically utilize dynamic threat intelligence to block malicious IPs.
- B. Incorrect.
VPC Service Controls are used to define security perimeters around Google Cloud resources but do not include functionality to block traffic from malicious IPs using threat intelligence.
- C. Incorrect.
Creating a custom firewall rule in Google Cloud requires manually specifying IP addresses and does not dynamically utilize Google's Threat Intelligence data.
- D. Correct.
Google Cloud Armor's Threat Intelligence feature allows you to leverage Google's continuously updated threat data to automatically block traffic from known malicious IPs.