Your company is launching a public e-commerce site on Google Cloud behind an external HTTP(S) load balancer. To reduce the risk of large-scale layer 7 and layer 3/4 distributed denial-of-service (DDoS) attacks without buying or managing additional hardware, which Google Cloud service should you enable?
Google Cloud Armor integrates directly with external HTTP(S) load balancers to provide Google-scale protection against both network-layer (L3/4) and application-layer (L7) DDoS attacks. It lets administrators create security policies that can block or rate-limit abusive IP addresses and leverages the same global edge infrastructure Google uses for its own services.
VPC firewall rules offer only basic allow-or-deny filtering and do not include advanced DDoS detection. Cloud NAT provides outbound address translation and does not mitigate unsolicited inbound attacks. Cloud Storage is an object storage service; while it benefits from Google's default infrastructure protections, it is not a dedicated DDoS mitigation service for web applications. Therefore, enabling Cloud Armor is the appropriate choice.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Google Cloud Armor?
Open an interactive chat with Bash
How does Google Cloud Armor differ from VPC firewall rules?
Open an interactive chat with Bash
Why can’t Cloud NAT mitigate DDoS attacks?
Open an interactive chat with Bash
What are layer 3/4 and layer 7 DDoS attacks?
Open an interactive chat with Bash
How does Google Cloud Armor protect applications from DDoS attacks?
Open an interactive chat with Bash
What is the difference between Google Cloud Armor and VPC firewall rules?
Open an interactive chat with Bash
GCP Cloud Digital Leader
Trust and Security with Google Cloud
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .