Google Cloud Professional Cloud Security Engineer — Question 5

A customer needs to prevent attackers from hijacking their domain/IP and redirecting users to a malicious site through a man-in-the-middle attack.
Which solution should this customer use?

Answer options

• A. VPC Flow Logs
• B. Cloud Armor
• C. DNS Security Extensions
• D. Cloud Identity-Aware Proxy

Correct answer: C

Explanation

The correct answer is C, DNS Security Extensions, as it provides a way to protect against spoofing and ensures that users are directed to the legitimate site. Options A and B do not address domain hijacking, and D focuses on user authentication rather than securing domain name resolution.