You are configuring an Application Load Balancer. The backend resides in your on-premises data center and is connected by Dedicated Interconnect. You need to ensure the load balancer can reference…

Question

Options

• AConfigure an internet network endpoint group (NEG) as a backend service as part of the load
• BConfigure a zonal network endpoint group (NEG) as a backend service as part of the load
• CConfigure a hybrid network endpoint group (NEG) as a backend service as part of the load
• DConfigure a Private Service Connect network endpoint group (NEG) as a backend service as part

• A
  6% (1)
• B
  6% (1)
• C
  76% (13)
• D
  12% (2)

Explanation

To ensure the Application Load Balancer can reference on-premises resources without traffic traversing the internet, you should configure a hybrid network endpoint group (NEG). Hybrid NEGs allow you to include on-premises endpoints connected through Dedicated Interconnect or VPN as part of the backend for the load balancer. Traffic from the load balancer will use the private connection (Dedicated Interconnect) to reach the on-premises resources. Opening the firewalls for the proxy-only subnet ensures that the load balancer can connect to the backend securely while keeping traffic internal and off the public internet.

No community discussion yet for this question.