ASSOCIATE-CLOUD-ENGINEER Question #368: Real Exam Question with Answer & Explanation

Question

You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?

Options

• AUse a proxy Network Load Balancer for the MIG and an A record in your DNS private zone with
• BUse a proxy Network Load Balancer for the MIG and a CNAME record in your DNS public zone
• CUse an Application Load Balancer for the MIG and a CNAME record in your DNS private zone
• DUse an Application Load Balancer for the MIG and an A record in your DNS public zone with the

Explanation

To implement a secure and highly available web application using a Managed Instance Group (MIG), an Application Load Balancer should be used in conjunction with an A record in a public DNS zone.

Common mistakes.

• A. A proxy Network Load Balancer operates at Layer 4, lacking the Layer 7 features needed for web applications, and a private DNS zone would not allow public internet access.
• B. A proxy Network Load Balancer is primarily for TCP/UDP traffic and lacks the Layer 7 features (e.g., URL-based routing, SSL offloading) required for a typical web application.
• C. A private DNS zone would prevent the web application from being accessible to users on the public internet, failing the requirement for a public web application.

Concept tested. Application Load Balancer for web apps and public DNS

Reference. https://cloud.google.com/load-balancing/docs/choose-load-balancer-type

No community discussion yet for this question.