Exam Professional Cloud Network Engineer topic 1 question 38 discussion

Correct Answer is (D): Cloud Armour is applied at load balancers Configuring Google Cloud Armor through Ingress. https://cloud.google.com/kubernetes-engine/docs/how-to/ingress-features Security policy features Google Cloud Armor security policies have the following core features: You can optionally use the QUIC protocol with load balancers that use Google Cloud Armor. You can use Google Cloud Armor with external HTTP(S) load balancers that are in either Premium Tier or Standard Tier. You can use security policies with GKE and the default Ingress controller.

The correct answer is D. GKE Ingress is the appropriate target for applying a Cloud Armor policy. Cloud Armor policies are applied to the HTTP(S) load balancer that manages the traffic, and in GKE, the ingress resource is typically used to manage traffic routing to the services running in the cluster.

GKE Ingress is the correct option.

Definitely the GKE Ingress

To apply a Cloud Armor policy to an application deployed in Google Kubernetes Engine (GKE), you should use the GKE Ingress resource. The GKE Ingress resource acts as the entry point for traffic to your GKE cluster and allows you to configure traffic routing rules, load balancing, and SSL termination for HTTP(S) traffic. By using the GKE Ingress resource, you can apply the Cloud Armor policy to the HTTP(S) traffic that is being routed to your GKE cluster.

D. GKE Ingress

D GKE Ingress is right, Cloud Armor applied at GLB

Cloud Armor policy's works only on L7(HTTPS LB) there for Ingress is the correct answer

it says which RESOURCE should you use, would it not be GKE Node answer B?

Seems like D is correct here

Answer is : D

D is correct

GCP Implements Ingress using Global HTTP LB, it creates one Global LB for each Ingress object. So answer is D.

D is correct

Correct Answer is (D)

Ans - D

GKE ingress