Google Associate Cloud Engineer Exam - Topic 2 Question 82 Discussion

Actual exam question for Google's Associate Cloud Engineer exam

Question #: 82
Topic #: 2

[All Associate Cloud Engineer Questions]

You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?

AUse SSL proxy load balancing for the MIG and an A record in your DNS private zone with the load balancer's IP address.

BUse SSL proxy load balancing for the MIG and a CNAME record in your DNS public zone with the load balancer's IP address.

CUse HTTP(S) load balancing for the MIG and a CNAME record in your DNS private zone with the load balancer's IP address.

DUse HTTP(S) load balancing for the MIG and an A record in your DNS public zone with the load balancer's IP address.

Show Suggested Answer

Suggested Answer: D

HTTP(S) load balancing is a Google-recommended practice for distributing web traffic across multiple regions and zones, and providing high availability, scalability, and security for web applications. It supports both IPv4 and IPv6 addresses, and can handle SSL/TLS termination and encryption. It also integrates with Cloud CDN, Cloud Armor, and Cloud Identity-Aware Proxy for enhanced performance and protection. A MIG can be used as a backend service for HTTP(S) load balancing, and can automatically scale and heal the VM instances that host the web application.

To configure DNS for HTTP(S) load balancing, you need to create an A record in your DNS public zone with the load balancer's IP address. This will map your domain name to the load balancer's IP address, and allow users to access your web application using the domain name. A CNAME record is not recommended, as it can cause latency and DNS resolution issues. A private zone is not suitable, as it is only visible within your VPC network, and not to the public internet.

HTTP(S) Load Balancing documentation

Setting up DNS records for HTTP(S) load balancing

Choosing a load balancer

by Gladys at May 13, 2024, 05:58 AM

Limited Time Offer

25%

Off

Get Premium Associate Cloud Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Noah

3 months ago

D seems like a solid choice for public DNS!

upvoted 0 times

...

Blondell

3 months ago

Wait, can you really use a CNAME in a private zone?

upvoted 0 times

...

Herman

4 months ago

C sounds a bit off to me.

upvoted 0 times

...

Refugia

4 months ago

I think B is the way to go!

upvoted 0 times

...

Bobbie

4 months ago

A record is usually better for private zones.

upvoted 0 times

...

Mollie

4 months ago

I'm a bit confused about the difference between A records and CNAME records in this context. I hope I can remember which one is appropriate for public zones.

upvoted 0 times

...

Tish

4 months ago

I practiced a similar question where we had to choose between SSL and HTTP(S) load balancing, and I think HTTP(S) is the better option for security.

upvoted 0 times

...

Filiberto

5 months ago

I think using a CNAME record is generally recommended for public zones, but I can't recall if that applies here.

upvoted 0 times

...

Erinn

5 months ago

I remember we discussed the importance of using HTTP(S) load balancing for secure applications, but I'm not sure about the DNS records.

upvoted 0 times

...

Myong

5 months ago

This seems like a good opportunity to demonstrate my knowledge of Google Cloud best practices. I'll carefully consider each option and select the one that aligns with the question's requirements.

upvoted 0 times

...

Karan

5 months ago

I'm a little confused about the difference between A records and CNAME records in DNS. I'll need to double-check my understanding of those before selecting the right answer.

upvoted 0 times

...

Sharika

5 months ago

Okay, the key here is to follow Google's recommended practices for secure and highly available solutions. I'm pretty sure that means using SSL proxy load balancing and a private DNS zone.

upvoted 0 times

...

Davida

5 months ago

Hmm, I'm a bit unsure about the difference between SSL proxy load balancing and HTTP(S) load balancing. I'll need to review those options carefully before answering.

upvoted 0 times

...

Lorrine

5 months ago

This looks like a straightforward question about load balancing and DNS configuration for a web application deployed on Compute Engine. I think I can handle this one.

upvoted 0 times

...

Melissia

5 months ago

Alright, I've got a strategy for this. Since the marketing users have the necessary permissions, I'm guessing the global search and recent records components are the way to go. I'll make sure to double-check my work before submitting.

upvoted 0 times

...

Brinda

5 months ago

Hmm, I'm not totally sure about this one. I know process mining has something to do with analyzing processes, but I can't remember if it's specifically through event logs. I might have to think this one through a bit more.

upvoted 0 times

...

Estrella

5 months ago

Hmm, I'm not totally sure about this one. I know the question is asking about configuring alerts, but I'm not familiar with the HPE 3PAR StoreServ system. I'll have to think it through carefully.

upvoted 0 times

...

Luis

5 months ago

I think blockchain is really good for transparency because of its immutable nature, but I'm still a bit unsure about how that relates to data control.

upvoted 0 times

...