Discuss Google Associate Cloud Engineer Exam Topic 2 Question 82

You are deploying a web application using Compute Engine. You created a managed instance group (MIG) to host the application. You want to follow Google-recommended practices to implement a secure and highly available solution. What should you do?

AUse SSL proxy load balancing for the MIG and an A record in your DNS private zone with the load balancer's IP address.

BUse SSL proxy load balancing for the MIG and a CNAME record in your DNS public zone with the load balancer's IP address.

CUse HTTP(S) load balancing for the MIG and a CNAME record in your DNS private zone with the load balancer's IP address.

DUse HTTP(S) load balancing for the MIG and an A record in your DNS public zone with the load balancer's IP address.

Suggested Answer: D

HTTP(S) load balancing is a Google-recommended practice for distributing web traffic across multiple regions and zones, and providing high availability, scalability, and security for web applications. It supports both IPv4 and IPv6 addresses, and can handle SSL/TLS termination and encryption. It also integrates with Cloud CDN, Cloud Armor, and Cloud Identity-Aware Proxy for enhanced performance and protection. A MIG can be used as a backend service for HTTP(S) load balancing, and can automatically scale and heal the VM instances that host the web application.

To configure DNS for HTTP(S) load balancing, you need to create an A record in your DNS public zone with the load balancer's IP address. This will map your domain name to the load balancer's IP address, and allow users to access your web application using the domain name. A CNAME record is not recommended, as it can cause latency and DNS resolution issues. A private zone is not suitable, as it is only visible within your VPC network, and not to the public internet.

HTTP(S) Load Balancing documentation

Setting up DNS records for HTTP(S) load balancing

Choosing a load balancer

Get Premium Associate Cloud Engineer Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

18 comments · newest first

Noah 11 months ago

D seems like a solid choice for public DNS!

Blondell 11 months ago

Wait, can you really use a CNAME in a private zone?

Herman 11 months ago

C sounds a bit off to me.

Refugia 11 months ago

I think B is the way to go!

Bobbie 12 months ago

A record is usually better for private zones.

Mollie 12 months ago

I'm a bit confused about the difference between A records and CNAME records in this context. I hope I can remember which one is appropriate for public zones.

Tish 1 year ago

I practiced a similar question where we had to choose between SSL and HTTP(S) load balancing, and I think HTTP(S) is the better option for security.

Filiberto 1 year ago

I think using a CNAME record is generally recommended for public zones, but I can't recall if that applies here.

Erinn 1 year ago

I remember we discussed the importance of using HTTP(S) load balancing for secure applications, but I'm not sure about the DNS records.

Myong 1 year ago

This seems like a good opportunity to demonstrate my knowledge of Google Cloud best practices. I'll carefully consider each option and select the one that aligns with the question's requirements.

Karan 1 year ago

I'm a little confused about the difference between A records and CNAME records in DNS. I'll need to double-check my understanding of those before selecting the right answer.

Sharika 1 year ago

Okay, the key here is to follow Google's recommended practices for secure and highly available solutions. I'm pretty sure that means using SSL proxy load balancing and a private DNS zone.

Davida 1 year ago

Hmm, I'm a bit unsure about the difference between SSL proxy load balancing and HTTP(S) load balancing. I'll need to review those options carefully before answering.

Lorrine 1 year ago

This looks like a straightforward question about load balancing and DNS configuration for a web application deployed on Compute Engine. I think I can handle this one.

Melissia 1 year ago

Alright, I've got a strategy for this. Since the marketing users have the necessary permissions, I'm guessing the global search and recent records components are the way to go. I'll make sure to double-check my work before submitting.

Brinda 1 year ago

Hmm, I'm not totally sure about this one. I know process mining has something to do with analyzing processes, but I can't remember if it's specifically through event logs. I might have to think this one through a bit more.

Estrella 1 year ago

Hmm, I'm not totally sure about this one. I know the question is asking about configuring alerts, but I'm not familiar with the HPE 3PAR StoreServ system. I'll have to think it through carefully.

Luis 1 year ago

I think blockchain is really good for transparency because of its immutable nature, but I'm still a bit unsure about how that relates to data control.

Google Associate Cloud Engineer Exam - Topic 2 Question 82 Discussion