Topic 1 Question 130
2 つ選択You plan to use a Google Cloud Armor policy to prevent common attacks such as cross-site scripting (XSS) and SQL injection (SQLi) from reaching your web application's backend. What are two requirements for using Google Cloud Armor security policies?
The load balancer must be an external SSL proxy load balancer.
Google Cloud Armor Policy rules can only match on Layer 7 (L7) attributes.
The load balancer must use the Premium Network Service Tier.
The backend service's load balancing scheme must be EXTERNAL.
The load balancer must be an external HTTP(S) load balancer.
解説
Reference: https://cloud.google.com/armor
ユーザの投票
コメント(12)
Answer is (B), (D).
Google Cloud Armor security policies protect your application by providing Layer 7 filtering and by scrubbing incoming requests for common web attacks or other Layer 7 attributes to potentially block traffic before it reaches your load balanced backend services or backend buckets. Google Cloud Armor security policies are available only for backend services behind an external HTTP(S) load balancer, TCP proxy load balancer, or an SSL proxy load balancer. The load balancer can be in Premium Tier or Standard Tier. https://cloud.google.com/armor/docs/security-policy-overview
👍 3Tabayashi2022/04/28Ans:D,E https://cloud.google.com/armor/docs/security-policy-overview Relevant extracts:
- Google Cloud Armor security policies enable you to rate-limit or redirect requests to your HTTP(S) Load Balancing, TCP Proxy Load Balancing, or SSL Proxy Load Balancing ...
- Google Cloud Armor security policies are sets of rules that match on attributes from Layer 3 to Layer 7 to protect externally facing applications or services...
- The load balancer can be in Premium Tier or Standard Tier.
👍 3ExamQnA2022/05/20- 正解だと思う選択肢: DE
DE
Requirements
These are the requirements for using Google Cloud Armor security policies:
- The load balancer must be an external HTTP(S) load balancer, TCP proxy load balancer, or SSL proxy load balancer.
- The backend service's load balancing scheme must be EXTERNAL.
- The backend service's protocol must be one of HTTP, HTTPS, HTTP/2, TCP, or SSL.
See https://cloud.google.com/armor/docs/security-policy-overview#requirements
👍 3cloudprincipal2022/05/31
シャッフルモード