Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ276

Securing communications and establishing boundary protection

You are deploying a new web application on Google Cloud that will be accessed from your on-premises network. To protect against threats such as malware, you must implement Transport Layer Security (TLS) interception for inbound traffic to the application. What should you do?

  • A Configure Secure Web Proxy. Offload the TLS traffic in the load balancer, inspect the traffic, and forward the traffic to the web application.
  • B Configure an internal proxy load balancer. Offload the TLS traffic in the load balancer inspect, the traffic and forward the traffic to the web application.
  • C Configure a hierarchical firewall policy. Enable TLS interception by using Cloud Next Generation Firewall (NGFW) Enterprise.
  • D Configure a VPC firewall rule. Enable TLS interception by using Cloud Next Generation Firewall (NGFW) Enterprise.
Explanation

Cloud NGFW Enterprise intercepts and decrypts TLS traffic for Layer 7 inspection, including inbound connections, so it can apply protections such as intrusion detection and prevention. TLS inspection is enabled with the --tls-inspect setting in firewall policy rules, including hierarchical firewall policy rules.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!