Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Google Cloud Certified Professional Cloud Network Engineer · Google Cloud
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Original Flow: User -> Global Load Balancer -> Gaming Instances New Desired Flow: User -> Scrubbing Service -> Global Load Balancer -> Gaming Instances
The best option is A: Create a Cloud Armor Security Policy that blocks all traffic except for the traffic-scrubbing service. Explanation: Cloud Armor is specifically designed to protect your Google Cloud resources, including those behind a load balancer, by filtering traffic based on IP, region, or other criteria. In this case, you can define a Cloud Armor security policy that allows traffic only from the traffic-scrubbing service and blocks everything else.
Answer is B: Cloud Armor is used for DDOS attacks and HTTPs requests, etc. VPC FW rules are more appropriate.