Google Cloud Professional Cloud Security Engineer — Question 55

You have been tasked with implementing external web application protection against common web application attacks for a public application on Google Cloud.
You want to validate these policy changes before they are enforced. What service should you use?

Answer options

• A. Google Cloud Armor's preconfigured rules in preview mode
• B. Prepopulated VPC firewall rules in monitor mode
• C. The inherent protections of Google Front End (GFE)
• D. Cloud Load Balancing firewall rules
• E. VPC Service Controls in dry run mode

Correct answer: A

Explanation

The correct answer is A because Google Cloud Armor's preconfigured rules in preview mode allow you to test and validate the rules against live traffic without enforcing them. The other options either do not specifically relate to web application attacks or do not offer the same level of validation for policy changes before application.