Google Professional Cloud Network Engineer Exam - Topic 3 Question 119 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam

Question #: 119
Topic #: 3

[All Professional Cloud Network Engineer Questions]

Your company offers a popular gaming service. Your instances are deployed with private IP addresses, and external access is granted through a global load balancer. You believe you have identified a potential malicious actor, but aren't certain you have the correct client IP address. You want to identify this actor while minimizing disruption to your legitimate users.

What should you do?

ACreate a Cloud Armor Policy rule that denies traffic and review necessary logs.

BCreate a Cloud Armor Policy rule that denies traffic, enable preview mode, and review necessary logs.

CCreate a VPC Firewall rule that denies traffic, enable logging and set enforcement to disabled, and review necessary logs.

DCreate a VPC Firewall rule that denies traffic, enable logging and set enforcement to enabled, and review necessary logs.

Show Suggested Answer

Suggested Answer: B

https://cloud.google.com/armor/docs/security-policy-concepts#preview_mode

by Janey at Apr 12, 2026, 05:35 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ayesha

4 days ago

I remember we discussed using Cloud Armor for security, but I'm not sure if denying traffic outright is the best first step.

upvoted 0 times

...