Match each Google Cloud perimeter security mechanism to the specific security threat or operational requirement it primarily addresses.
- VPC Service ControlsPreventing data exfiltration by creating security perimeters around Google Cloud managed services and APIs.
- Cloud ArmorMitigating Layer 7 web application attacks (e.g., SQLi, XSS) and applying IP rate-limiting at the edge load balancer.
- Hierarchical Firewall PoliciesEnforcing consistent baseline network firewall rules across all projects within an entire organization or folder hierarchy.
- Private Service ConnectConnecting to services across different VPC networks privately using endpoint IP addresses without VPC peering.
Cevap
VPC Service Controls matches with preventing data exfiltration around Google Cloud APIs; Cloud Armor matches with Layer 7 protection and rate-limiting at the edge; Hierarchical Firewall Policies matches with enforcing baseline rules across the organization hierarchy; and Private Service Connect matches with private cross-VPC service access without VPC Peering.
Each feature aligns directly with its primary architecture purpose: VPC Service Controls safeguards API data boundaries against exfiltration; Cloud Armor provides WAF and edge filter capabilities; Hierarchical Firewall Policies enforce network security rules across the enterprise resource hierarchy; and Private Service Connect offers secure private access to services in separate VPCs.
Adım Adım Çözüm
Anahtar Kavram
GCP Network Security and Perimeter Controls