Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 6 of 107
Free Preview · 107 of 355 · questions 1–107 of 355 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Cannot be A because question says Internal application while Cloud Armor is only on external perimeter
The correct answer is B. VPC Firewall Rules. Because: They allow you to restrict access by CIDR. Built-in (native) SYN flood protection is part of GCP and does not require a separate product. The question is not about advanced DDoS protection, but only about the basic protection that GCP provides “out of the box.”
GCP doesn't have a native VPC firewall for SYN flood protection; that function is handled by Cloud Armor, which is a separate, edge-based service for DDoS mitigation. Cloud Armor uses security policies to protect external HTTP(S), SSL proxy, and TCP proxy load balancers, and it applies these policies at the edge of Google's network before traffic reaches your VPC.