Câu 91: Google Cloud Professional Cloud Network Engineer

You are designing a new global application using Compute Engine instances that will be exposed by a global HTTP(S) load balancer. You need to secure your application from distributed denial-of-service and application layer (layer 7) attacks. What should you do?

1. A. Configure VPC Service Controls and create a secure perimeter. Define fine-grained perimeter controls and enforce that security posture across your Google Cloud services and projects.
2. B. Configure a Google Cloud Armor security policy in your project, and attach it to the backend service to secure the application. — đáp án hiện tại
3. C. Configure VPC firewall rules to protect the Compute Engine instances against distributed denial-of-service attacks.
4. D. Configure hierarchical firewall rules for the global HTTP(S) load balancer public IP address at the organization level.