Exam Professional Cloud Network Engineer topic 1 question 110 discussion

The Answer is B. Google Cloud Armor help detect and block Layer 7 DDoS attacks.

Google Cloud Armor is the recommended solution to protect against distributed denial-of-service and application layer (layer 7) attacks in a global application that is exposed by a global HTTP(S) load balancer. Google Cloud Armor allows you to create security policies that define rules to block traffic based on IP addresses, geo-location, user-agent, and other characteristics. These policies can be applied to specific backend services, such as Compute Engine instances, to protect them from attacks. VPC Service Controls (A) and VPC firewall rules (C) are also important for securing your application, but they are not specific to DDoS and layer 7 attacks. Hierarchical firewall rules (D) are not relevant for protecting against DDoS and layer 7 attacks.

• B. Configure a Google Cloud Armor security policy in your project, and attach it to the backend service ***** to secure the application.

100% sure for B, Cloud Armor is security service to DDoS GCP.

seems like b https://cloud.google.com/armor security policies to help protect your load-balanced applications from distributed denial of service (DDoS) and other web-based attacks

B as Cloud Armor protects against DDoS

B. Configure a Google Cloud Armor security policy in your project, and attach it to the backend service to secure the application. https://cloud.google.com/armor https://youtu.be/Ti-ln36t__I