Google Professional Cloud Security Engineer Question 215
Select 3Google Cloud PlatformYour organization has deployed a web application on Google Cloud and wants to protect it from common web exploits such as SQL injection and cross-site scripting (XSS). You have been tasked with configuring Google Cloud Armor to ensure the application is properly secured. What steps should you take to achieve this?
- A
Create a security policy in Google Cloud Armor and attach it to the load balancer serving the web application.
- B
Enable the preconfigured WAF (Web Application Firewall) rules in the Google Cloud Armor security policy.
- C
Manually write custom rules to block SQL injection and XSS attacks in Google Cloud Armor.
- D
Ensure that the application is deployed in a private GKE cluster to avoid exposure to public IP addresses.
- E
Configure rate-limiting rules in Google Cloud Armor to mitigate potential denial-of-service attacks.
Show answer and explanation
Correct answers: A, B, E
Explanation
To protect a web application using Google Cloud Armor, you must first attach a security policy to the load balancer. Enabling preconfigured WAF rules is a best practice to defend against common web exploits like SQL injection and XSS. Additionally, rate-limiting rules can mitigate potential denial-of-service attacks. While deploying the application in a private GKE cluster is a good security measure, it is not directly related to configuring Google Cloud Armor.
- A. Correct.
Correct: A security policy must be created and attached to the load balancer to enforce rules for incoming traffic.
- B. Correct.
Correct: Enabling preconfigured WAF rules simplifies the process of defending against common web attacks like SQL injection and XSS.
- C. Incorrect.
Incorrect: While custom rules can be created, enabling preconfigured WAF rules is a faster and more reliable approach for common threats.
- D. Incorrect.
Incorrect: Deploying the application in a private GKE cluster is a good security practice but unrelated to configuring Google Cloud Armor.
- E. Correct.
Correct: Rate-limiting rules help protect against denial-of-service attacks, which is an essential part of securing the application.