gcloud 6-11

Which Google Cloud service provides defense against infrastructure and application Distributed Denial of Service (DDoS) attacks?

• Google Cloud Armor

• Cloud Load Balancing

• Cloud DNS

• Cloud CDN

Which two of the following statements are true about Google Cloud Armor?

• Google Cloud Armor protection is delivered at the edge of Google’s network

• Google Cloud Armor is a ransomware defense service

• Google Cloud Armor is not currently compatible with any third-party partner security products

• Google Cloud Armor enforces access control based on IPv4 and IPv6 addresses or CIDRs

Which IAM role contains permissions to create, modify, and delete networking resources, except for firewall rules and SSL certificates?

• Network viewer

• Security administrator

• Network administrator

• Security viewer

Which type of IAM member belongs to an application or virtual machine instead of an individual end user?

• Cloud Identity domain

• Google group

• Service account

• Google account

What is the primary purpose of Packet Mirroring in network security?

• To redirect traffic to a different network interface

• To filter out unwanted traffic from a network

• To create a duplicate copy of network traffic for analysis

• To encrypt network traffic for privacy

Which of the following is a key benefit of using Packet Mirroring for network security analysis?

• It automatically patches vulnerabilities in software

• It directly prevents cyberattacks

• It enables the capture and inspection of traffic without impacting network performance

• It reduces network bandwidth usage

When you use the internal IP address of the forwarding rule to specify an internal Network Load Balancer next hop, the load balancer can only be:

• In the same VPC network as the next hop route or in a peered VPC network

• In the same subnet as the next hop route or a Shared VPC network

• In the same VPC network as the next hop route

• In the same subnet as the next hop route

Where would you configure traffic management for a load balancer?

• In the URL map

• In the load descriptor

• In the load balancer backend

• In the load balancer frontend

You can use hybrid load balancing to connect these environments:

• Google Cloud and AWS

• Google Cloud and on-premises

• Google Cloud, AWS, and on-premises

• Google Cloud, other public clouds, and on-premises

CDN Interconnect provides:

• A private connection between your on-premises network and Google Cloud

• A direct connection between your origin servers and Google’s Cloud Load Balancing service

• A virtual private network (VPN) tunnel between your VPC network and Google’s global network

• A direct peering connection between third-party content delivery networks (CDNs) and Google’s edge network