Drupal 8.x

Hi,

I'm very new to Drupal, 

My objective is to start to develop a website based on Varbase using google cloud.

I'm not sure I started with the right foot. I have deployed drupal from the launch panel.

Google created a virtual machine with a drupal instance.  Can I upgrade that drupal instance to Varbase or I will better start from scratch with a lamp virtual machine? If so, are varbase and google cloud good friend.

I have chosen varbase because it seems to have the most common extensions that you need. However, I'm open to suggestion.

Hello,

Is there a way to upload multiple images all at once inside Article Content?  

Thank You. :)

Hi, we're undergoing a Penetration test and we've been flagged for having illegal file names being entered into certain fields which they say makes us vulnerable to cross-site scripting and susceptible to data security breaches. 

Hi

I've discovered that if you try to log in too often with a wrong password you get locked out of that account for a while.

If you spam too much logins from an IP, you are also locked out. Lockouts last for an hour, as far as I can tell.

But after what period of time does the failed login counter reset? And is it relative to the first or last failed attempt?

I know I can delete the flood table, but this is more of a good-to-know question then an I-locked-myself-out question.

If there's a difference in versions, I'm interested mainly in Drupal 8.