ASSOCIATE-CLOUD-ENGINEER · Question #368
You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and
The correct answer is D. Use an Application Load Balancer for the MIG and an A record in your DNS public zone with the. To implement a secure and highly available web application using a Managed Instance Group (MIG), an Application Load Balancer should be used in conjunction with an A record in a public DNS zone.
Question
Options
- AUse a proxy Network Load Balancer for the MIG and an A record in your DNS private zone with
- BUse a proxy Network Load Balancer for the MIG and a CNAME record in your DNS public zone
- CUse an Application Load Balancer for the MIG and a CNAME record in your DNS private zone
- DUse an Application Load Balancer for the MIG and an A record in your DNS public zone with the
How the community answered
(48 responses)- A2% (1)
- B4% (2)
- C8% (4)
- D85% (41)
Why each option
To implement a secure and highly available web application using a Managed Instance Group (MIG), an Application Load Balancer should be used in conjunction with an A record in a public DNS zone.
A proxy Network Load Balancer operates at Layer 4, lacking the Layer 7 features needed for web applications, and a private DNS zone would not allow public internet access.
A proxy Network Load Balancer is primarily for TCP/UDP traffic and lacks the Layer 7 features (e.g., URL-based routing, SSL offloading) required for a typical web application.
A private DNS zone would prevent the web application from being accessible to users on the public internet, failing the requirement for a public web application.
An Application Load Balancer (formerly HTTP(S) Load Balancer) is Google's recommended solution for external web applications, providing global, Layer 7 load balancing with essential features like SSL termination and URL maps. An A record in a public DNS zone correctly maps the public domain name directly to the external IP address of the Application Load Balancer, ensuring public accessibility and high availability.
Concept tested: Application Load Balancer for web apps and public DNS
Source: https://cloud.google.com/load-balancing/docs/choose-load-balancer-type
Topics
Community Discussion
No community discussion yet for this question.