Your team is developing an application that will be used by consumers all over the world. Currently, the application sits behind a global external application load balancer. You need to protect the application from potential application-level attacks. What should you do?

A. Enable Cloud CDN on the backend service. B. Create multiple firewall deny rules to block malicious users, and apply them to the global external application load balancer. C. Create a Google Cloud Armor security policy with web application firewall rules, and apply the security policy to the backend service D. Create a VPC Service Controls perimeter with the global external application load balancer as the protected service, and apply it to the backend service.