Discuss Google Professional Cloud Network Engineer Exam Topic 2 Question 121

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You believe you have identified a potential malicious actor, but aren't certain you have the correct client IP address. You want to identify this actor while minimizing disruption to your legitimate users.

What should you do?

ACreate a Cloud Armor Policy rule that denies traffic and review necessary logs.

BCreate a Cloud Armor Policy rule that denies traffic, enable preview mode, and review necessary logs.

CCreate a VPC Firewall rule that denies traffic, enable logging and set enforcement to disabled, and review necessary logs.

DCreate a VPC Firewall rule that denies traffic, enable logging and set enforcement to enabled, and review necessary logs.

Suggested Answer: B

https://cloud.google.com/armor/docs/security-policy-concepts#preview_mode

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

24 comments · newest first

Natalie 2 days ago

C is too lenient. We need to enforce rules, not just log.

Makeda 8 days ago

A seems risky. Denying traffic outright could hurt our players.

Serina 13 days ago

I agree, B allows us to monitor without blocking legit users.

Tracey 18 days ago

I think option B is the best. Preview mode helps avoid disruption.

Mariann 23 days ago

D might be too aggressive. We need to be careful with enforcement.

Buffy 28 days ago

C could work, but logging without enforcement feels risky.

Caprice 1 month ago

I like B too. It allows us to monitor without blocking everyone.

Cristal 1 month ago

Option A seems too harsh. Denying traffic outright could hurt legit players.

Emile 1 month ago

Agreed! We need to minimize impact on real users.

Thad 2 months ago

I think option B is the best. Preview mode helps avoid disruptions.

Arlie 2 months ago

I like C, but not sure if disabling enforcement is wise.

Lyda 2 months ago

Option A seems too risky without preview mode.

Derick 2 months ago

Wait, can we really trust the logs to identify the actor?

Dacia 2 months ago

I disagree, D seems safer with enforcement enabled.

Alonso 2 months ago

I think option B is the best choice. Preview mode is key!

Annalee 3 months ago

Just use option C if you want to play it safe!

Mel 3 months ago

I like option A, but it feels a bit risky without preview mode.

Lashonda 3 months ago

Wait, can we really trust the logs? They can be misleading sometimes.

Evelynn 3 months ago

I disagree, option D seems more secure with enforcement enabled.

Bong 3 months ago

I think option B is the best choice. Preview mode is key!

Angella 4 months ago

I recall that preview mode is important for testing changes. So, I lean towards option B, but I wonder if there are any risks with that approach.

Ruby 4 months ago

I practiced a similar question where enabling logging was crucial. I feel like option D might be too aggressive since it enforces the rule immediately.

Dianne 4 months ago

I'm not entirely sure, but I remember something about using VPC Firewall rules for more granular control. Maybe option C could be the way to go?

Tom 5 months ago

I think option B makes sense because it allows us to test the rule without actually blocking legitimate users right away.

Google Professional Cloud Network Engineer Exam - Topic 2 Question 121 Discussion