Google Professional Cloud Security Engineer Question 217
Select 2Google Cloud PlatformYou are a security engineer at a company that wants to ensure safe internet access for its employees by deploying a secure web proxy. The proxy should restrict access to certain websites, monitor web traffic, and integrate with Google Cloud services. What steps should you take to deploy a secure web proxy solution in Google Cloud?
- A
Deploy Google Cloud Armor to filter web traffic and enforce access control policies.
- B
Set up a Cloud NAT instance to route traffic to the internet securely.
- C
Deploy a third-party web proxy solution from the Google Cloud Marketplace and configure it with proper IAM permissions.
- D
Enable VPC Service Controls to restrict access to sensitive data and services in your Google Cloud environment.
- E
Configure the secure web proxy solution to log web traffic to Cloud Logging for monitoring and auditing.
Show answer and explanation
Correct answers: C, E
Explanation
To deploy a secure web proxy in Google Cloud, you can use a third-party solution from the Google Cloud Marketplace that meets your requirements (e.g., restricting website access, monitoring traffic). Proper IAM permissions ensure secure operation. Additionally, integrating the proxy with Cloud Logging provides visibility into web traffic for security monitoring and auditing. Other options, such as Google Cloud Armor, Cloud NAT, or VPC Service Controls, serve different purposes and do not fulfill the specific requirements of a secure web proxy.
- A. Incorrect.
Google Cloud Armor is designed to protect applications from DDoS attacks and enforce Layer 7 security policies, but it is not a secure web proxy solution.
- B. Incorrect.
Cloud NAT is used to provide internet access for resources in a private VPC without exposing them to public IP addresses. While useful for secure internet routing, it does not provide web proxy functionality.
- C. Correct.
Deploying a third-party web proxy solution from the Google Cloud Marketplace and properly configuring it with IAM permissions is a valid approach to implementing a secure web proxy.
- D. Incorrect.
VPC Service Controls are useful for restricting access to sensitive data and services, but they do not provide secure web proxy functionality.
- E. Correct.
Configuring the secure web proxy solution to log web traffic to Cloud Logging is essential for monitoring, auditing, and ensuring security compliance.