Google Cloud Network Security Controls Quiz

1. Which feature in Cloud Armor protects against Layer 7 attacks?

Web Application Firewall (WAF) rules

IP whitelisting only

TCP connection limits

Subnet isolation

2. In a hybrid cloud setup, which GCP service is best for establishing a secure on-premises connection?

Cloud Interconnect or Cloud VPN

Cloud Load Balancing

Cloud DNS

Cloud Armor

3. Which GCP service provides centralized logging for network traffic?

VPC Flow Logs

Cloud Monitoring only

Firewall rules engine

Cloud Trace

4. How does Binary Authorization enhance container security in GCP?

By ensuring only signed container images can be deployed

By automatically patching all containers

By encrypting container registries

By limiting container CPU usage

5. What is the difference between internal and external load balancers in GCP?

Internal serves traffic within VPC; external serves traffic from the internet

External is more secure than internal

Internal provides higher bandwidth

They function identically

6. Which Cloud Armor feature allows you to rate-limit requests from a single IP?

Throttle rules

Rate-limiting rules

Connection draining

Adaptive protection

7. In GCP, how does Organization Policy enforce network security?

By restricting what network configurations can be created at the organization level

By automatically blocking all external traffic

By encrypting all VPC traffic

By monitoring firewall logs only

8. What does the 'target tags' field in a GCP firewall rule specify?

Which resources the rule applies to

The source IP addresses

The destination port

The logging level

9. Which encryption standard is recommended for Cloud Interconnect?

Media Access Control Security (MACsec)

WEP encryption

No encryption needed for dedicated lines

RC4 cipher

10. What is a service perimeter in VPC Service Controls?

A boundary that restricts data access to authorized networks

A firewall rule for external traffic

A subnet within a VPC

A load balancer configuration

11. What is the primary purpose of a VPC (Virtual Private Cloud) in Google Cloud?

To provide isolated network infrastructure for your resources

To manage billing across multiple projects

To automatically scale compute instances

To encrypt all data in transit

12. In GCP firewall rules, what does a deny rule with priority 1000 do compared to an allow rule with priority 2000?

The deny rule takes precedence because lower priority numbers are evaluated first

The allow rule takes precedence

Both rules are applied simultaneously

Priority numbers do not affect rule evaluation

13. What is the primary function of a Cloud NAT (Network Address Translation)?

To allow private instances to initiate outbound connections securely

To block all inbound traffic

To assign public IPs to all instances

To replicate data across regions

14. Private Google Access allows instances without external IPs to access which services?

Google APIs and services over private routes

Only on-premises networks

Public internet websites

Other VPCs in different regions

15. Which service enforces organization-level security policies in GCP?

Cloud Armor

VPC Service Controls

Cloud KMS

Cloud Audit Logs

16. What is the purpose of a Cloud VPN connection?

To encrypt and route traffic securely over the public internet

To provide unlimited bandwidth between networks

To bypass firewall rules

To manage SSL certificates

17. Cloud Interconnect provides which benefit over standard VPN?

Lower latency and higher bandwidth dedicated connection

Automatic encryption of all traffic

No need for firewall rules

Built-in DDoS protection

18. In GCP, what does VPC peering enable?

Direct private connectivity between two VPCs

Public internet routing between subnets

Automatic DNS resolution across regions

Shared firewall rules between projects

19. Cloud Armor primarily protects against which type of attack?

DDoS and web application attacks

Insider threats

Disk encryption failures

Service account compromise

20. Which firewall rule component specifies the direction of traffic flow?

Source IP range

Ingress or Egress

Protocol and port

Target tags

Google Cloud Security Engineer Network Security Controls Quiz