Google Cloud Professional Cloud Security Engineer Practice Exam

Which load balancer types are denied at the global node's policy in a resource hierarchy?

1. Only external load balancers

2. Only internal load balancers

3. All load balancer types

4. Only TCP/UDP load balancers

The correct answer is: All load balancer types

The correct answer is that all load balancer types are denied at the global node's policy in a resource hierarchy. This policy ensures that specific configurations regarding network architecture and security protocols are maintained consistently across the resources within the Google Cloud environment. By denying all types of load balancers at the global level, organizations can enforce a more controlled and secure approach to traffic management. This restriction prevents the potential misconfiguration or unrestricted use of load balancers, which could introduce vulnerabilities or lead to non-compliant cloud networking practices. Recognizing that various load balancer types, including external, internal, and TCP/UDP, serve different roles in managing and directing traffic, the blanket denial helps mitigate risks associated with their deployment when not appropriately controlled or monitored. Being aware of the specific policies related to load balancers is integral for cloud security engineers tasked with setting up a secure and compliant cloud environment.