nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #39

You need to restrict access to your Google Cloud load-balanced application so that only specific IP addresses can connect. What should you do?

The correct answer is C. Tag the backend instances "application," and create a firewall rule with target tag "application". Network Load Balancing is a pass-through load balancer, you control access to the load balancer's backends using Google Cloud firewall rules. https://cloud.google.com/load-balancing/docs/network/networklb-backend-service#firewall_rules

Submitted by rachelw· Apr 18, 2026Implementing network security

Question

You need to restrict access to your Google Cloud load-balanced application so that only specific IP addresses can connect. What should you do?

Options

  • ACreate a secure perimeter using the Access Context Manager feature of VPC Service Controls
  • BCreate a secure perimeter using VPC Service Controls, and mark the load balancer as a service
  • CTag the backend instances "application," and create a firewall rule with target tag "application"
  • DLabel the backend instances "application," and create a firewall rule with the target label

How the community answered

(40 responses)
  • A
    5% (2)
  • C
    93% (37)
  • D
    3% (1)

Explanation

Network Load Balancing is a pass-through load balancer, you control access to the load balancer's backends using Google Cloud firewall rules. https://cloud.google.com/load-balancing/docs/network/networklb-backend-service#firewall_rules

Topics

#Firewall Rules#Network Tags#Access Control#Network Security

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice