PCSE Configuring network security

A platform team must DDoS protection at edge. Which option aligns with Google best practices?

Multiple choice — select one answer

Answer choices

  1. a. ICMP only
  2. b. Cloud Armor
  3. c. SSL policies on load balancers
  4. d. VPC Service Controls

Architectural breakdown & explanation

Cloud Armor filters malicious traffic.

Correct answer(s): b. Cloud Armor

Exam domain: Configuring network security (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the Google Professional Cloud Security Engineer bank. Run a full timed practice exam with domain-weighted random questions in your browser.