6.1 Configuring Google Cloud Armor Policies. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the purpose of bot management rules in Cloud Armor?

   • ATo encrypt traffic between clients and the backend
   • BTo block all traffic from non-browser clients
   • CTo automatically scale backend resources in response to bot traffic
   • DTo identify and mitigate unwanted bot traffic, such as scraping or credential stuffing
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which Cloud Armor feature allows you to block traffic from IP addresses that are known to be malicious based on threat intelligence feeds?

   • AAdaptive Protection
   • BRate limiting
   • CGoogle Threat Intelligence integration
   • DPreconfigured WAF rules
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   Your company runs a public-facing web application on a zonal Google Cloud VM instance that is not behind a load balancer. The security team wants to use Cloud Armor to block requests that match a custom WAF rule for SQL injection. What must you do first to apply the Cloud Armor policy?

   • AEnable Cloud Armor on the VPC network and attach the policy to the subnet.
   • BAttach the policy directly to the VM instance's network interface.
   • CConfigure the VM's firewall rules to reference the Cloud Armor policy.
   • DCreate an external Application Load Balancer and attach the policy to its backend service.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which Cloud Armor feature provides preconfigured rules that can be used to block common web attacks such as SQL injection and cross-site scripting?

   • AAdaptive Protection
   • BRate limiting rules
   • CPreconfigured WAF rules
   • DBot management rules
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   Your website is being targeted by a sophisticated bot that is able to solve JavaScript challenges and reCAPTCHA puzzles. The bot is also rotating IP addresses to avoid rate limiting. You need to mitigate this bot while minimizing the impact on legitimate users. What should you do?

   • AUse Cloud Armor's bot management with a reCAPTCHA Enterprise score-based rule that blocks requests with a low score.
   • BBlock all traffic from data center IP addresses.
   • CUse a stricter rate limiting rule that blocks any IP that makes more than 5 requests per minute.
   • DIncrease the complexity of the JavaScript challenge.
   Reveal Solution Discussion Select an answer first