nerdexam
Google

ASSOCIATE-CLOUD-ENGINEER · Question #368

You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and

The correct answer is D. Use an Application Load Balancer for the MIG and an A record in your DNS public zone with the. To implement a secure and highly available web application using a Managed Instance Group (MIG), an Application Load Balancer should be used in conjunction with an A record in a public DNS zone.

Submitted by ngozi_ng· Mar 30, 2026Deploying and implementing a cloud solution

Question

You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?

Options

  • AUse a proxy Network Load Balancer for the MIG and an A record in your DNS private zone with
  • BUse a proxy Network Load Balancer for the MIG and a CNAME record in your DNS public zone
  • CUse an Application Load Balancer for the MIG and a CNAME record in your DNS private zone
  • DUse an Application Load Balancer for the MIG and an A record in your DNS public zone with the

How the community answered

(48 responses)
  • A
    2% (1)
  • B
    4% (2)
  • C
    8% (4)
  • D
    85% (41)

Why each option

To implement a secure and highly available web application using a Managed Instance Group (MIG), an Application Load Balancer should be used in conjunction with an A record in a public DNS zone.

AUse a proxy Network Load Balancer for the MIG and an A record in your DNS private zone with

A proxy Network Load Balancer operates at Layer 4, lacking the Layer 7 features needed for web applications, and a private DNS zone would not allow public internet access.

BUse a proxy Network Load Balancer for the MIG and a CNAME record in your DNS public zone

A proxy Network Load Balancer is primarily for TCP/UDP traffic and lacks the Layer 7 features (e.g., URL-based routing, SSL offloading) required for a typical web application.

CUse an Application Load Balancer for the MIG and a CNAME record in your DNS private zone

A private DNS zone would prevent the web application from being accessible to users on the public internet, failing the requirement for a public web application.

DUse an Application Load Balancer for the MIG and an A record in your DNS public zone with theCorrect

An Application Load Balancer (formerly HTTP(S) Load Balancer) is Google's recommended solution for external web applications, providing global, Layer 7 load balancing with essential features like SSL termination and URL maps. An A record in a public DNS zone correctly maps the public domain name directly to the external IP address of the Application Load Balancer, ensuring public accessibility and high availability.

Concept tested: Application Load Balancer for web apps and public DNS

Source: https://cloud.google.com/load-balancing/docs/choose-load-balancer-type

Topics

#Application Load Balancer#managed instance group#DNS public zone#HTTPS load balancing

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice