nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #135

You are configuring a new application that will be exposed behind an external load balancer with both IPv4 and IPv6 addresses and support TCP pass-through on port 443. You will have backends in two…

The correct answer is B. Use global TCP Proxy Load Balancing with backends in both regions. Global TCP Proxy does not do SSL offloading according to the docs, allows for pass through. https://cloud.google.com/load-balancing/docs/choosing-load-balancer#lb-decision-tree

Submitted by daniela_cl· Apr 18, 2026Configuring network services

Question

You are configuring a new application that will be exposed behind an external load balancer with both IPv4 and IPv6 addresses and support TCP pass-through on port 443. You will have backends in two regions: us-west1 and us-east1. You want to serve the content with the lowest possible latency while ensuring high availability and autoscaling. Which configuration should you use?

Options

  • AUse global SSL Proxy Load Balancing with backends in both regions.
  • BUse global TCP Proxy Load Balancing with backends in both regions.
  • CUse global external HTTP(S) Load Balancing with backends in both regions.
  • DUse Network Load Balancing in both regions, and use DNS-based load balancing to direct traffic

How the community answered

(22 responses)
  • A
    9% (2)
  • B
    86% (19)
  • C
    5% (1)

Explanation

Global TCP Proxy does not do SSL offloading according to the docs, allows for pass through. https://cloud.google.com/load-balancing/docs/choosing-load-balancer#lb-decision-tree

Topics

#Load Balancing#TCP Proxy Load Balancer#Global Load Balancing#Network Services

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice