GCP - Professional Cloud Network Engineer Study Guide

6: Configuring, implementing and managing a cloud network security solution

This chapter builds the security controls that guard a Google Cloud network at the edge, in the data plane, and on egress. It configures Google Cloud Armor edge and backend policies, WAF rules, Adaptive Protection, rate limiting, bot management, and Google Threat Intelligence, then moves to Cloud NGFW policy strategy, effective-rule evaluation, tiers, micro-segmentation, Cloud NAT egress addressing, Secure Web Proxy, and multi-NIC appliance inspection with Packet Mirroring.