Professional Cloud Network EngineerDemo

By Google · Question Mode

QuestionQ220

Configuring, implementing and managing a cloud network security solution

Your organization has deployed a mission-critical application that is expected to become a new revenue source. During planning and deployment, you recently implemented a security profile using the default set of threat signatures supplied by Cloud Next Generation Firewall (Cloud NGFW). This application is the only application running in this project.

You need to strengthen the application's security posture so that threats are logged and the associated packets are dropped. What should you do?

  • A Configure a new default threat signature with Deny All to all severity options. Review the logs to understand the impact.
  • B Set up a Linux VM as the frontend gateway for the application. Create iptables rules to drop all packets, excluding the application port.
  • C For all severity options (critical, high, medium, low and informational) in the security profile, change the default override action to Deny.
  • D Configure Cloud Scheduler to run a task that checks the Cloud NGFW logs to verify the threats. Configure the task to create a security profile with each signature ID set to override the default action.
Explanation

Cloud NGFW threat-prevention security profiles can override the default action for each threat severity. Applying the DENY override to critical, high, medium, low, and informational threats causes matching packets to be dropped and produces a threat-log entry; the logged action appears as DROP.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!