Google Cloud Professional Cloud Security Engineer Practice Exam

Which Google Cloud service provides external web application protection against common attacks?

1. Google Cloud Armor

2. Cloud Functions

3. App Engine

4. Data Encryption

The correct answer is: Google Cloud Armor

Google Cloud Armor is the correct choice for providing external web application protection against common attacks. This service helps organizations defend their web applications from a range of threats, including Distributed Denial of Service (DDoS) attacks and other types of web attacks by providing a comprehensive security policy framework. Cloud Armor leverages Google's global infrastructure to deliver scalable security features. For instance, it offers HTTP(S) Load Balancing to distribute traffic across multiple instances, enhancing the availability and performance of applications while also providing DDoS defense capabilities. It allows users to define custom security policies that can block or allow traffic based on IP address, geography, and other factors, which is essential for mitigating risks from attacks on web applications. Using Cloud Armor also provides additional benefits such as integration with Cloud Load Balancing and support for various security signs such as WAF (Web Application Firewall) rules. As multiple applications are hosted on the same infrastructure, the service helps ensure that one compromised application does not jeopardize others. Other options, such as Cloud Functions, App Engine, and Data Encryption, don't focus specifically on external web application protection. Cloud Functions caters to serverless compute resources, while App Engine is a platform for developing and hosting applications. Data Encryption, on the other hand