Google Professional Cloud Network Engineer Question 498
Single answerGoogle Cloud PlatformYour organization has deployed a multi-region application on Google Cloud. Recently, you have noticed unusual activity originating from IP addresses associated with known malicious actors. As a Professional Cloud Network Engineer, you want to leverage Google Threat Intelligence to enhance the security of your network by automatically blocking connections from these IPs. Which solution should you implement?
- A
Enable Google Cloud Armor and configure a security policy with preconfigured threat intelligence-based rules.
- B
Activate VPC Service Controls and restrict access to internal resources based on threat intelligence.
- C
Deploy a Cloud IDS instance to detect and block malicious traffic in real-time using threat intelligence feeds.
- D
Use Firewall Insights to generate firewall rules based on Google Threat Intelligence data.
Show answer and explanation
Correct answer: A
Explanation
Google Cloud Armor allows you to enhance network security by using preconfigured threat intelligence-based rules. These rules automatically block traffic from IP addresses associated with known malicious actors, leveraging Google's extensive threat intelligence capabilities. This makes it the most suitable solution for the scenario described.
- A. Correct.
Correct: Google Cloud Armor provides preconfigured security policies that use Google's threat intelligence to block traffic originating from known malicious IPs.
- B. Incorrect.
Incorrect: VPC Service Controls are used to define security perimeters for data exfiltration protection, but they do not leverage Google Threat Intelligence for IP blocking.
- C. Incorrect.
Incorrect: Cloud IDS is used for intrusion detection and monitoring but does not directly block traffic based on Google Threat Intelligence.
- D. Incorrect.
Incorrect: Firewall Insights provides recommendations to optimize firewall rules but does not directly integrate with Google Threat Intelligence for automatic IP blocking.