Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ245

Securing communications and establishing boundary protection

Your company runs a critical web application on Google Cloud. The application is seeing a growing number of sophisticated Layer 7 attacks, including cross-site scripting (XSS) and SQL injection attempts. You must protect the application from these attacks while minimizing effects on legitimate traffic and maintaining high availability. What should you do?

  • A Implement a load balancer in front of the web application instances, and enable Adaptive Protection and throttling to mitigate the occurrence of these malicious requests.
  • B Configure Cloud Next Generation Firewall to block known malicious IP addresses targeting /32 addresses.
  • C Enable Google Cloud Armor’s pre-configured WAF rules for OWASP Top 10 vulnerabilities at the backend service.
  • D Configure a Cloud Armor security policy with customized and pre-configured WAF rules for OWASP Top 10 vulnerabilities at the load balancer.
Explanation

Google Cloud Armor preconfigured WAF rules use OWASP Core Rule Set signatures, including signatures for XSS and SQL injection. A Cloud Armor security policy is attached to the Application Load Balancer’s backend service, where the rules can be tuned to reduce false positives while filtering malicious Layer 7 requests before they reach the application.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!