Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 17 of 77
Free Preview · 77 of 256 · questions 1–77 of 256 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The correct answer is B: Create a Cloud Armor Policy rule that denies traffic, enable preview mode, and review necessary logs. This approach allows you to test the rule without impacting legitimate users. In preview mode, the rule doesn't block traffic but logs the denied requests, letting you verify the suspected malicious actor's IP. Once confident, you can enforce the rule to block the malicious traffic permanently. This method minimizes disruption while you confirm the correct client IP.
Exam on 2024-05-02
Cloud Armor Policy Rule: Cloud Armor is a security service in Google Cloud that provides defenses against web-based threats. When you create a Cloud Armor Policy rule, you can specify conditions under which traffic should be denied. Enable Preview Mode: Preview mode is a feature in Cloud Armor that allows you to simulate the impact of the rules without enforcing them. Enabling preview mode means that the rules will not actively block traffic; instead, they will generate logs for matched traffic. Review Necessary Logs: With preview mode enabled, you can review the logs to identify potential threats and gather information about the traffic without immediately disrupting legitimate users.