nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #320

Your customer wants you to create a secure website with autoscaling based on the compute instance CPU load. You want to enhance performance by storing static content in Cloud Storage. Which resources

The correct answer is A. An external HTTP(S) load balancer with a managed SSL certificate to distribute the load and a. To distribute user traffic for a secure, autoscaling website with static content in Cloud Storage, an external HTTP(S) load balancer with a managed SSL certificate and a URL map configured with both Compute Engine instance group backends and Cloud Storage backends is required.

Submitted by rania.sa· Mar 30, 2026Deploying and implementing a cloud solution

Question

Your customer wants you to create a secure website with autoscaling based on the compute instance CPU load. You want to enhance performance by storing static content in Cloud Storage. Which resources are needed to distribute the user traffic?

Options

  • AAn external HTTP(S) load balancer with a managed SSL certificate to distribute the load and a
  • BAn external network load balancer pointing to the backend instances to distribute the load evenly.
  • CAn internal HTTP(S) load balancer together with Identity-Aware Proxy to allow only HTTPS traffic.
  • DAn external HTTP(S) load balancer to distribute the load and a URL map to target the requests

How the community answered

(52 responses)
  • A
    81% (42)
  • B
    10% (5)
  • C
    6% (3)
  • D
    4% (2)

Why each option

To distribute user traffic for a secure, autoscaling website with static content in Cloud Storage, an external HTTP(S) load balancer with a managed SSL certificate and a URL map configured with both Compute Engine instance group backends and Cloud Storage backends is required.

AAn external HTTP(S) load balancer with a managed SSL certificate to distribute the load and aCorrect

An external HTTP(S) load balancer is essential for distributing user traffic to a public website and supports autoscaling backends (like Managed Instance Groups). A managed SSL certificate ensures secure HTTPS connections, while a URL map (implied by the truncated option for routing) allows directing static content requests to a Cloud Storage bucket, fulfilling all specified requirements for performance enhancement and traffic distribution for a secure website.

BAn external network load balancer pointing to the backend instances to distribute the load evenly.

An external network load balancer operates at Layer 4 (TCP/UDP) and does not support HTTP/HTTPS routing features like URL maps, SSL offloading (with managed certificates), or routing directly to Cloud Storage, nor does it inherently handle autoscaling based on HTTP-specific metrics.

CAn internal HTTP(S) load balancer together with Identity-Aware Proxy to allow only HTTPS traffic.

An internal HTTP(S) load balancer is designed for traffic within a VPC network, not for public internet-facing websites. Identity-Aware Proxy (IAP) is for securing access to internal applications for specific users, not for public websites.

DAn external HTTP(S) load balancer to distribute the load and a URL map to target the requests

While an external HTTP(S) load balancer and a URL map are correct components for routing, this option does not explicitly mention the managed SSL certificate, which is crucial for meeting the "secure website" requirement, making option A more complete despite its truncation.

Concept tested: External HTTP(S) Load Balancer for secure web applications

Source: https://cloud.google.com/load-balancing/docs/https

Topics

#HTTP(S) load balancing#managed SSL certificate#URL map#static content

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice