QuestionQ288

Designing for security and compliance

For this question, refer to the Altostrat Media case study. Altostrat is worried about sophisticated, multi-vector Distributed Denial of Service (DDoS) attacks aimed at multiple layers of its infrastructure. DDoS attacks could disrupt video streaming and result in financial losses. You must mitigate this risk. What should you do?

  • A Set up VPC Service Controls to restrict access to sensitive resources and prevent data exfiltration.
  • B Configure Cloud Next Generation Firewall (NGFW) with custom rules to filter malicious traffic at the network level.
  • C Deploy Google Cloud Armor with pre-configured and custom rules for L3/L4 and L7 protection
  • D Activate Security Command Center to monitor security posture and detect potential threats.
Explanation

Google Cloud Armor provides always-on protection against Layer 3 and Layer 4 volumetric and network-protocol DDoS attacks, while Cloud Armor security policies provide configurable Layer 7 protection. This combination mitigates multi-vector attacks before malicious traffic reaches streaming workloads.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!