Which solution should your team implement to meet these requirements?

An engineering team is launching a web application that will be public on the internet. The web application is hosted in multiple GCP regions and will be directed to the respective backend based on the URL request.

Your team wants to avoid exposing the application directly on the internet and wants to deny traffic from a specific list of malicious IP addresses

Which solution should your team implement to meet these requirements?
A . Cloud Armor
B . Network Load Balancing
C . SSL Proxy Load Balancing
D . NAT Gateway

View Answer

Answer: A

Explanation:

https://cloud.google.com/armor/docs/security-policy-overview#edge-security

Reference: https://cloud.google.com/armor/docs/security-policy-concepts