When Google Threat Intelligence is applied to a Cloud Armor policy, what type of traffic is primarily blocked?

Traffic that exceeds a configured request rate

Traffic that matches known attack signatures

Traffic from IP addresses or domains identified as malicious

Traffic that originates from outside a specific geographic region

Your application is behind an external Application Load Balancer. You have a Cloud Armor backend security policy with a rate limiting rule that allows 10 requests per second per IP. You are now getting complaints from users who are being blocked even though they are not making excessive requests. You suspect that the rate limiting is being triggered by requests from a shared NAT gateway. What should you do?

Change the rate limiting rule to use a custom key that includes a user identifier, such as a cookie or header.

Move the rate limiting rule to an edge security policy.

Increase the rate limit to 100 requests per second per IP.

Remove the rate limiting rule entirely.

Google CloudProfessional Cloud Network Engineer

Domain 6Objective 1

6.1 Configuring Google Cloud Armor Policies. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 1)

Part of the Section 6: Configuring, implementing and managing a cloud network security solution (~13% of the exam) domain, which accounts for ~13% of the PROFESSIONAL-CLOUD-NETWORK-ENGINEER exam.

23questions here

5free pages

6concepts

~13%of the exam

Questions 1–5

1foundation · easy
Which type of Cloud Armor policy is applied at the edge of Google's network, before traffic is forwarded to the load balancer?
Select an answer first
2foundation · easy
When Google Threat Intelligence is applied to a Cloud Armor policy, what type of traffic is primarily blocked?
Select an answer first
3foundation · easy
A network engineer wants to apply a Cloud Armor security policy to filter traffic before it reaches a backend service. Which resource can the policy be attached to in order to achieve this?
Select an answer first
4expert · hard
Your application is behind an external Application Load Balancer. You have a Cloud Armor backend security policy with a rate limiting rule that allows 10 requests per second per IP. You are now getting complaints from users who are being blocked even though they are not making excessive requests. You suspect that the rate limiting is being triggered by requests from a shared NAT gateway. What should you do?
Select an answer first
5foundation · easy
Which Cloud Armor feature can be used to present a CAPTCHA challenge to a client to verify that it is not an automated bot?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-NETWORK-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-NETWORK-ENGINEER” is a trademark of its owner, used for identification only.

6.1 Configuring Google Cloud Armor Policies. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 1)

Questions 1–5

Which type of Cloud Armor policy is applied at the edge of Google's network, before traffic is forwarded to the load balancer?

When Google Threat Intelligence is applied to a Cloud Armor policy, what type of traffic is primarily blocked?

A network engineer wants to apply a Cloud Armor security policy to filter traffic before it reaches a backend service. Which resource can the policy be attached to in order to achieve this?

Which Cloud Armor feature can be used to present a CAPTCHA challenge to a client to verify that it is not an automated bot?

Keep studying — Section 6: Configuring, implementing and managing a cloud network security solution (~13% of the exam)