Google Cloud Professional Cloud Security Engineer — Question 58

Your organization has had a few recent DDoS attacks. You need to authenticate responses to domain name lookups. Which Google Cloud service should you use?

Answer options

• A. Cloud DNS with DNSSEC
• B. Cloud NAT
• C. HTTP(S) Load Balancing
• D. Google Cloud Armor

Correct answer: A

Explanation

The correct answer is A, Cloud DNS with DNSSEC, as it provides authentication for DNS responses, helping to prevent DDoS attacks. Options B (Cloud NAT) and C (HTTP(S) Load Balancing) do not focus on DNS authentication, while D (Google Cloud Armor) is primarily for application layer protection.