QuestionQ211

Configuring, implementing and managing a cloud network security solution

Your company has just launched a new, critical revenue-generating web application. The application was deployed for scalability by using managed instance groups, autoscaling, and a Network Load Balancer as the frontend. One day, you observe severe bursty traffic that causes autoscaling to reach the maximum number of instances, and application users cannot complete transactions. After investigating, you believe this is a DDoS attack. You want to rapidly restore user access and enable successful transactions while minimizing cost.

Which two steps should you take?

Choose two
  • A Use Cloud Armor to blacklist the attacker's IP addresses.
  • B Increase the maximum autoscaling backend to accommodate the severe bursty traffic.
  • C Create a global HTTP(s) load balancer and move your application backend to this load balancer.
  • D Shut down the entire application in GCP for a few hours. The attack will stop when the application is offline.
  • E SSH into the backend compute engine instances, and view the auth logs and syslogs to further understand the nature of the attack.
Explanation

A global HTTP(S) load balancer enables Cloud Armor policies to filter requests at Google’s network edge. Cloud Armor can deny traffic from identified attacker IP addresses before it consumes backend capacity, preserving instances for legitimate transactions and avoiding the ongoing cost of scaling the backend merely to absorb malicious traffic.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!