Cloud Ngfw Url Filtering Configuration

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.

A security engineer is designing an egress perimeter control architecture for Google Cloud workloads located in a VPC across multiple zones. The organization requires Layer 7 traffic inspection to filter outbound HTTP and HTTPS connections based on domain matcher strings and TLS Server Name Indication (SNI), applying custom block or allow actions.

Which combination of components and configuration steps should the engineer implement to meet these requirements?

Deploy an external Application Load Balancer with a global forwarding rule, apply target network tags to VM instances, and attach Cloud Armor security policies containing custom WAF rules.

Create an internal passthrough Network Load Balancer in each zone, attach standard VPC firewall rules filtering by service account, and associate a proxy-only subnet with the REGIONAL_MANAGED_PROXY purpose.

Create a zonal firewall endpoint in each target zone, configure a URL filtering security profile containing domain matcher strings, add the profile to a security profile group, and create a firewall policy rule that uses the apply_security_profile_group action.

Configure a regional internal proxy Network Load Balancer, create a ProjectNetworkPolicy to intercept outbound traffic, and apply VPC firewall rules with destination ranges set to 0.0.0.0/0.

Professional Cloud Security Engineer

Cloud Ngfw Url Filtering Configuration

Related questions