MENU
You have been tasked with implementing external web application protection against common web application attacks for a public application on Google Cloud. You want to validate these policy changes before they are enforced. What service should you use?
Suggested Answer: A, C
Get Premium Professional Cloud Security Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
LI
Linwood
11 months ago
Not sure if Cloud Load Balancing is the best choice here.
WE
Wenona
11 months ago
Prepopulated VPC firewall rules in monitor mode sounds safer.
MI
Mitsue
11 months ago
I’m surprised that VPC Service Controls can be used like that.
PA
Patti
11 months ago
I think the GFE protections are enough, though.
LE
Levi
12 months ago
Definitely go with Google Cloud Armor's preconfigured rules!
GR
Gracia
12 months ago
I practiced a similar question, and I think Cloud Armor is the best option here for testing policies before enforcement.
AR
Armando
1 year ago
I feel like the inherent protections of Google Front End could be useful, but I'm not confident if they allow for validation like the others.
MY
Myra
1 year ago
I'm not entirely sure, but I remember something about VPC firewall rules being used in monitor mode for validation.
AM
Amos
1 year ago
I think Google Cloud Armor's preconfigured rules in preview mode might be the right choice since it allows testing before applying changes.
MA
Mari
1 year ago
I'm pretty sure the inherent protections of Google Front End (GFE) are not meant for validating custom web application protection policies, so I'm going to rule that one out.
CA
Carmelina
1 year ago
VPC Service Controls in dry run mode could also be a good choice, but I'm not as familiar with that service. I'll need to research it a bit more to be confident in that answer.
KE
Kenny
1 year ago
Hmm, the question is asking about validating web application protection, so I'm leaning towards option A. The preconfigured rules in preview mode seem like the most straightforward way to test the changes.
KI
Kirk
1 year ago
I'm a bit unsure about this one. Is Cloud Load Balancing firewall rules a valid option as well? I'll need to double-check the details on that.
ST
Stephanie
1 year ago
I think Google Cloud Armor's preconfigured rules in preview mode would be the best option here. It allows you to validate the policy changes before enforcing them.
LA
Layla
1 year ago
Ah, this is a good one. I remember learning about the Telemetry feature in Prisma Cloud, which provides a graphical view of connections. That seems like the most likely answer here.
AN
Annamae
1 year ago
This question seems pretty clear to me. I'll make sure to double-check that the purchase agreement includes all the details specified in the prompt.
SH
Sherill
1 year ago
Option A all the way! Google's got our back with those preconfigured rules. It's like having a superhero on the team.
LA
Lavelle
1 year ago
Option B is tempting, but I'm a bit worried about the 'monitor mode' part. Seems like a risky move for a public application.
EL
Elza
1 year ago
C) The inherent protections of Google Front End (GFE)
FR
Franchesca
1 year ago
A) That's a good point. It's better to test with a more secure option like Google Cloud Armor.
AL
Aleta
1 year ago
B) I see your concern, but Google Cloud Armor's preconfigured rules in preview mode would be a safer bet for testing.
CR
Craig
1 year ago
A) Google Cloud Armor's preconfigured rules in preview mode
SH
Sharen
1 year ago
Option D, Cloud Load Balancing firewall rules, could be a solid choice. Gotta love that built-in protection!
ER
Ernie
1 year ago
Hmm, I don't know, Option C sounds a bit too good to be true. The inherent protections of GFE might not be enough for our needs.
JE
Jeanice
1 year ago
User 3: Yeah, let's not take any chances with just relying on the inherent protections of Google Front End.
SH
Sharen
1 year ago
User 2: I agree, it's better to validate the policy changes before enforcing them.
NA
Nada
1 year ago
User 1: I think we should go with option A, Google Cloud Armor's preconfigured rules in preview mode.
RI
Rikki
2 years ago
I'm leaning towards Option E. VPC Service Controls in dry run mode could give us a good idea of how the policies will work without enforcing them yet.
MA
Malcom
1 year ago
User 2: I agree. It's always better to validate changes before enforcing them.
JA
Jaime
1 year ago
User 1: I think Option E is a good choice. It allows us to test the policies without actually implementing them.
KA
Kaycee
2 years ago
I prefer using VPC Service Controls in dry run mode. It allows us to test the changes without affecting the production environment.
BE
Beatriz
2 years ago
Option A seems like the way to go. I've heard Google Cloud Armor's preconfigured rules are pretty robust.
MI
Miesha
1 year ago
User 4: Sounds good to me.
EV
Evangelina
1 year ago
User 3: Let's go with option A then.
LO
Lottie
1 year ago
User 2: Yeah, I agree. I've heard they are pretty robust.
NA
Nada
2 years ago
User 1: I think we should use Google Cloud Armor's preconfigured rules in preview mode.
GL
Glory
2 years ago
I agree with Jacob. It's important to validate the policy changes before enforcing them.
JA
Jacob
2 years ago
I think we should use Google Cloud Armor's preconfigured rules in preview mode.