QuestionQ101
Securing communications and establishing boundary protectionYour organization operates a critical web application on Google Cloud that serves international customers. Rising malicious traffic aimed at this application has strained resources and resulted in periods of downtime. You need to design security controls to improve the application's resilience to web attacks, strengthen perimeter protection, and provide access control. What should you do?
- A Employ network load balancing for traffic distribution. Update Identity-Aware Proxy (IAP) policies to allow only administrative access. Implement custom firewall rules on all external IP addresses.
- B Set up firewall rules on Compute Engine instances within the application's environment. Rely on load balancers for threat detection. Increase instance resources to cope with attack volume.
- C Configure firewall rules to block traffic from known malicious IP ranges. Set up Google Cloud Armor and implement Identity-Aware Proxy (IAP) for granular access control.
- D Add firewall rules that restrict all internal IP ranges. Establish Cloud DNS security policies. Disable external IP addresses to reduce the attack surface. Create user groups for access control.
Community Discussion