QuestionQ344

Securing communications and establishing boundary protection

An engineering team is deploying a web application that will be publicly accessible on the internet. The web application is hosted across multiple GCP regions and will be routed to the appropriate backend based on the URL request.

The team wants to prevent direct internet exposure of the application and deny traffic from a specified list of malicious IP addresses.

Which solution should the team implement to meet these requirements?

  • A Cloud Armor
  • B Network Load Balancing
  • C SSL Proxy Load Balancing
  • D NAT Gateway
Explanation

Cloud Armor applies security policies at the Google Cloud edge to applications behind supported load balancers. Its rules can deny requests from specified source IP addresses, while the load balancer fronts the multi-region backends so the application instances do not need direct public exposure. Cloud Armor security policy use cases

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!