PROFESSIONAL-CLOUD-NETWORK-ENGINEER Question #207: Real Exam Question with Answer & Explanation

Question

Your organization recently exposed a set of services through a global external Application Load Balancer. After conducting some testing, you observed that responses would intermittently yield HTTP 4xx or 5xx error response codes. You already enabled and reviewed the health check logs. You need to identify the error. What should you do?

Options

• AAccess a VM in the VPC through SSH to access the backend VM directly. If the request is
• BDelete the load balancer and backend services. Create a new Passthrough Network Load
• CValidate the health of the backend service. Enable logging for the backend service and identify
• DValidate the health of the backend service. Disable any Cloud Armor policies on the backend

Explanation

When a global external Application Load Balancer returns intermittent 4xx or 5xx errors, the most effective diagnostic step is to validate the health of the backend service and then enable backend service logging to capture detailed request/response information. Backend service logs record HTTP status codes, latency, and request details, allowing you to pinpoint which backends are failing and why. Option C correctly identifies this approach. Option A (SSHing to a backend VM) can help confirm a backend issue but is manual and not scalable. Option B (replacing with a Passthrough Network Load Balancer) is destructive and unnecessary - it also changes the load balancing behavior entirely. Option D (disabling Cloud Armor) removes a security control and should not be a first diagnostic step without evidence that Cloud Armor is causing the errors.

No community discussion yet for this question.