Google Professional Cloud Security Engineer Exam - Topic 3 Question 95 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 95
Topic #: 3

[All Professional Cloud Security Engineer Questions]

Your organization has had a few recent DDoS attacks. You need to authenticate responses to domain name lookups. Which Google Cloud service should you use?

ACloud DNS with DNSSEC

BCloud NAT

CHTTP(S) Load Balancing

DGoogle Cloud Armor

Show Suggested Answer

Suggested Answer: C, D

https://cloud.google.com/confidential-computing/confidential-vm/docs/creating-cvm-instance#considerations

Confidential VM does not support live migration. You can only enable Confidential Computing on a VM when you first create the instance. https://cloud.google.com/confidential-computing/confidential-vm/docs/creating-cvm-instance

by Melvin at Dec 05, 2024, 02:14 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rebbeca

3 months ago

Wait, does DNSSEC really help with DDoS attacks? I'm not so sure.

upvoted 0 times

...

Charisse

4 months ago

Agreed, A is the best choice for authenticating DNS responses.

upvoted 0 times

...

Luis

4 months ago

A makes sense, but isn't it a bit complicated to set up?

upvoted 0 times

...

Leota

4 months ago

I thought Cloud Armor would be enough for DDoS protection?

upvoted 0 times

...

Corinne

4 months ago

Definitely A, Cloud DNS with DNSSEC is the way to go!

upvoted 0 times

...

Deeanna

4 months ago

I’m a bit confused; I thought Cloud NAT was more about network address translation. Does it even relate to DNS?

upvoted 0 times

...

Louvenia

5 months ago

I practiced a similar question where DNSSEC was mentioned, so I feel like A is definitely the right choice.

upvoted 0 times

...

Lea

5 months ago

I'm not entirely sure, but I remember something about Cloud Armor being related to security. Could it be relevant here?

upvoted 0 times

...

Tequila

5 months ago

I think the answer might be A, Cloud DNS with DNSSEC, since it deals with securing DNS responses.

upvoted 0 times

...

Lang

5 months ago

Google Cloud Armor could be a good choice, but I'm not sure if it specifically handles domain name lookup authentication. I'll have to research the capabilities of each service more closely.

upvoted 0 times

...

Providencia

5 months ago

Cloud NAT and HTTP(S) Load Balancing don't seem directly relevant to the question. I'm leaning towards either A or D, but I'll need to double-check the details.

upvoted 0 times

...

Alonso

5 months ago

Hmm, I'm not sure about this one. I'll need to review the differences between the Google Cloud services to determine the best option for authenticating domain name lookups.

upvoted 0 times

...

Vince

5 months ago

I think the answer is A. Cloud DNS with DNSSEC seems like the best option to authenticate domain name lookups and protect against DDoS attacks.

upvoted 0 times

...

Shay

10 months ago

Google Cloud Armor? Sounds like they're trying to protect us from a bunch of big, bad hackers. I'll pass and go with A.

upvoted 0 times

Malcom

9 months ago

Definitely, Cloud DNS with DNSSEC will help secure our domain name lookups and prevent any unauthorized access.

upvoted 0 times

...

Talia

9 months ago

Yeah, Google Cloud Armor does sound like it's for protection, but I think A is the better choice in this situation.

upvoted 0 times

...

Dianne

10 months ago

I agree, Cloud DNS with DNSSEC is the way to go for authenticating responses to domain name lookups.

upvoted 0 times

...

Jeniffer

10 months ago

Cloud NAT? More like 'Cloud Nah, that's not the one' in this case. I'm going with A.

upvoted 0 times

Chantell

9 months ago

Cloud NAT might not be the best choice for this situation.

upvoted 0 times

...

Eladia

9 months ago

Definitely, we need that extra layer of security.

upvoted 0 times

...

German

10 months ago

I agree, Cloud DNS with DNSSEC is the way to go.

upvoted 0 times

...

Cathrine

10 months ago

DNSSEC, huh? I bet that stands for 'Definitely No Shenanigans Security'. Sign me up!

upvoted 0 times

...

Thaddeus

11 months ago

Cloud DNS with DNSSEC? Sounds like the right choice to me. Gotta keep those pesky DDoS attacks at bay!

upvoted 0 times

Hubert

9 months ago

Google Cloud Armor is more for protecting web applications, so Cloud DNS with DNSSEC is the most suitable choice here.

upvoted 0 times

...

Johana

10 months ago

Cloud NAT could also help with network address translation, but for authentication, Cloud DNS with DNSSEC is the best option.

upvoted 0 times

...

Glenna

10 months ago

I agree, it's important to protect our domain name lookups from potential threats. Cloud DNS with DNSSEC is a reliable option.

upvoted 0 times

...

Audry

10 months ago

Yes, Cloud DNS with DNSSEC is definitely the way to go. It adds an extra layer of security to prevent those attacks.

upvoted 0 times

...

Derrick

10 months ago

I agree, it adds an extra layer of protection against DDoS attacks.

upvoted 0 times

...

Tequila

10 months ago

Yes, Cloud DNS with DNSSEC is the way to go for securing domain name lookups.

upvoted 0 times

...

Mitsue

11 months ago

I'm not sure, but I think Google Cloud Armor could also be a good option for protecting against DDoS attacks.

upvoted 0 times

...

Lauran

11 months ago

I agree with Hana. Cloud DNS with DNSSEC provides secure authentication for domain name lookups.

upvoted 0 times

...

Hana

11 months ago

I think we should use Cloud DNS with DNSSEC for authenticating responses to domain name lookups.

upvoted 0 times

...