Cloud Armor for DDoS and WAF in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Google Cloud Armor?

Google Cloud Armor is a security service that protects your applications from attacks like DDoS and helps control who can access your services by using rules called policies.

beginner

How does Cloud Armor help protect against DDoS attacks?

Cloud Armor blocks large amounts of unwanted traffic by filtering requests based on rules, stopping attacks before they reach your application.

beginner

What is a WAF in the context of Cloud Armor?

WAF stands for Web Application Firewall. In Cloud Armor, it means rules that protect your web apps from harmful requests like SQL injection or cross-site scripting.

intermediate

What are security policies in Cloud Armor?

Security policies are sets of rules you create to allow or block traffic based on IP addresses, geographic locations, or request properties.

intermediate

Why is it important to use both DDoS protection and WAF rules together?

Using both helps stop large traffic floods (DDoS) and also blocks harmful requests that try to exploit your app, giving stronger overall protection.

What type of attacks does Cloud Armor primarily protect against?

A Phishing attacks

B Distributed Denial of Service (DDoS) attacks

C Malware infections

D Password guessing attacks

Cloud Armor is designed to protect against DDoS attacks by filtering and blocking unwanted traffic.

What does WAF stand for in Cloud Armor?

A Wireless Application Firewall

B Wide Access Filter

C Web Access Framework

D Web Application Firewall

WAF means Web Application Firewall, which protects web apps from harmful requests.

Which of the following can you use in Cloud Armor security policies to block traffic?

A IP addresses and geographic locations

B User passwords

C Email addresses

D Browser history

Cloud Armor policies use IP addresses and geographic locations to allow or block traffic.

What happens if you do NOT use Cloud Armor for your web app?

A Your app will automatically be protected by Google

B Your app will run faster

C Your app may be vulnerable to DDoS and harmful web attacks

D Your app will not be accessible

Without Cloud Armor, your app can be exposed to attacks that disrupt service or exploit vulnerabilities.

Cloud Armor's WAF rules help protect against which of these?

A SQL injection and cross-site scripting

B Hardware failures

C Network cable cuts

D Power outages

WAF rules block harmful web requests like SQL injection and cross-site scripting attacks.

Explain how Google Cloud Armor protects a web application from DDoS attacks and harmful web requests.

Think about how rules can stop bad traffic before it reaches your app.

Describe what security policies in Cloud Armor are and how they help control access to your services.

Imagine setting house rules for who can enter and who cannot.