PCNE Implementing VPC Instances Practice Question
A company wants to protect its HTTPS Load Balancer from DDoS attacks and common web application attacks like SQL injection and cross-site scripting (XSS). Which Google Cloud service should be used?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cloud Armor
Cloud Armor provides DDoS protection and WAF capabilities including preconfigured rules for OWASP, XSS, and SQLi. It attaches to HTTPS Load Balancers.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cloud IDS
Why it's wrong here
Cloud IDS provides network threat detection by inspecting traffic for known malware signatures and suspicious patterns, but it does not perform web application firewall (WAF) functions such as blocking SQL injection or XSS payloads at the application layer. It is tempting because it offers DDoS detection capabilities, making it seem relevant to the stem’s DDoS concern, and would be the correct choice if the requirement were solely to detect network-based intrusions rather than to actively protect a load balancer against application-layer attacks.
- ✓
Cloud Armor
Why this is correct
Correct. Cloud Armor provides WAF and DDoS protection for HTTPS Load Balancers.
- ✗
VPC Service Controls
Why it's wrong here
VPC Service Controls restrict data exfiltration, not web application attacks.
- ✗
Firewall Rules
Why it's wrong here
Firewall rules are L3/L4; they do not inspect application layer attacks like SQLi or XSS.
Go deeper
Related to this question
About these practice questions
One of 961 original PCNE practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.