exam questions

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam

Exam Professional Cloud Security Engineer topic 1 question 109 discussion

Actual exam question from Google's Professional Cloud Security Engineer
Question #: 109
Topic #: 1
[All Professional Cloud Security Engineer Questions]

Your organization has had a few recent DDoS attacks. You need to authenticate responses to domain name lookups. Which Google Cloud service should you use?

  • A. Cloud DNS with DNSSEC
  • B. Cloud NAT
  • C. HTTP(S) Load Balancing
  • D. Google Cloud Armor
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Tabayashi
Highly Voted 2 years, 1 month ago
Answer is (A). The Domain Name System Security Extensions (DNSSEC) is a feature of the Domain Name System (DNS) that authenticates responses to domain name lookups. It does not provide privacy protections for those lookups, but prevents attackers from manipulating or poisoning the responses to DNS requests. https://cloud.google.com/dns/docs/dnssec
upvoted 19 times
AzureDP900
1 year, 7 months ago
Agreed, A is right
upvoted 2 times
...
...
Xoxoo
Most Recent 9 months ago
Selected Answer: A
To authenticate responses to domain name lookups and protect your organization from DDoS attacks, you can use Cloud DNS with DNSSEC. DNS Security Extensions (DNSSEC) is a feature of the Domain Name System (DNS) that authenticates responses to domain name lookups and prevents attackers from manipulating or poisoning the responses to DNS requests. Cloud DNS supports DNSSEC and automatically manages the creation and rotation of DNSSEC keys (DNSKEY records) and the signing of zone data with resource record digital signature (RRSIG) records. By enabling DNSSEC in Cloud DNS, you can protect your domains from spoofing and poisoning attacks. Keyword here is domain name lookup so it must be A.
upvoted 4 times
...
risc
1 year, 8 months ago
Selected Answer: A
A, as explained by Tabayashi
upvoted 2 times
...
AwesomeGCP
1 year, 8 months ago
Selected Answer: A
A. Cloud DNS with DNSSEC
upvoted 2 times
...
zellck
1 year, 8 months ago
Selected Answer: A
A is the answer.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...