A large e-retailer is moving to Google Cloud Platform with its ecommerce website. The company wants to ensure payment information is encrypted between the customer's browser and GCP when the…

Question

Options

• AConfigure an SSL Certificate on an L7 Load Balancer and require encryption.
• BConfigure an SSL Certificate on a Network TCP Load Balancer and require encryption.
• CConfigure the firewall to allow inbound traffic on port 443, and block all other inbound traffic.
• DConfigure the firewall to allow outbound traffic on port 443, and block all other outbound traffic.

• A
  70% (33)
• B
  4% (2)
• C
  11% (5)
• D
  15% (7)

Explanation

To encrypt traffic between a customer's browser and GCP (HTTPS), you need an SSL/TLS certificate installed on an L7 (HTTP(S)) load balancer. The L7 load balancer terminates TLS at the Google edge, ensuring all data in transit is encrypted. Option B (Network TCP Load Balancer) operates at Layer 4 and does not perform SSL termination or manage HTTPS in the same way - it passes raw TCP traffic and cannot enforce HTTPS. Options C and D are firewall rules that allow or block traffic on port 443 but do not themselves provide any encryption - encryption requires a certificate and TLS handshake, not just open ports.

No community discussion yet for this question.