nerdexam
Google

PROFESSIONAL-CLOUD-ARCHITECT · Question #11

You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual…

The correct answer is C. Ensure that a firewall rule exists to allow load balancer health checks to reach the instances in the. The best practice when configuration a health check is to check health and serve traffic on the same port. However, it is possible to perform health checks on one port, but serve traffic on another. If you do use two different ports, ensure that firewall rules and services…

Submitted by chiamaka_o· Mar 30, 2026Ensuring solution and operations reliability

Question

You set up an autoscaling instance group to serve web traffic for an upcoming launch. After configuring the instance group as a backend service to an HTTP(S) load balancer, you notice that virtual machine (VM) instances are being terminated and re-launched every minute. The instances do not have a public IP address. You have verified the appropriate web response is coming from each instance using the curl command. You want to ensure the backend is configured correctly. What should you do?

Options

  • AEnsure that a firewall rule exists to allow source traffic on HTTP/HTTPS to reach the load
  • BAssign a public IP to each instance and configure a firewall rule to allow the load balancer to
  • CEnsure that a firewall rule exists to allow load balancer health checks to reach the instances in the
  • DCreate a tag on each instance with the name of the load balancer. Configure a firewall rule with

How the community answered

(23 responses)
  • A
    4% (1)
  • B
    13% (3)
  • C
    78% (18)
  • D
    4% (1)

Explanation

The best practice when configuration a health check is to check health and serve traffic on the same port. However, it is possible to perform health checks on one port, but serve traffic on another. If you do use two different ports, ensure that firewall rules and services running on instances are configured appropriately. If you run health checks and serve traffic on the same port, but decide to switch ports at some point, be sure to update both the backend service and the Backend services that do not have a valid global forwarding rule referencing it will not be health checked and will have no health status.

Topics

#load balancer health checks#firewall rules#HTTP(S) load balancing#instance groups

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice