Google Professional Cloud Developer Exam - Topic 11 Question 113 Discussion

Actual exam question for Google's Professional Cloud Developer exam

Question #: 113
Topic #: 11

[All Professional Cloud Developer Questions]

Your team is responsible for maintaining an application that aggregates news articles from many different sources. Your monitoring dashboard contains publicly accessible real-time reports and runs on a Compute Engine instance as a web application. External stakeholders and analysts need to access these reports via a secure channel without authentication. How should you configure this secure channel?

AAdd a public IP address to the instance. Use the service account key of the instance to encrypt the traffic.

BUse Cloud Scheduler to trigger Cloud Build every hour to create an export from the reports. Store the reports in a public Cloud Storage bucket.

CAdd an HTTP(S) load balancer in front of the monitoring dashboard. Configure Identity-Aware Proxy to secure the communication channel.

DAdd an HTTP(S) load balancer in front of the monitoring dashboard. Set up a Google-managed SSL certificate on the load balancer for traffic encryption.

Show Suggested Answer

Suggested Answer: D

https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs

by Katlyn at Nov 23, 2025, 08:08 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Developer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Delila

17 days ago

C is definitely the way to go. We need both security and accessibility.

upvoted 0 times

...

Rodrigo

22 days ago

Option A seems risky. Public IPs can expose us to attacks.

upvoted 0 times

...

Olene

27 days ago

I feel like option B is too public. Not secure enough for stakeholders.

upvoted 0 times

...

Shalon

1 month ago

I’m surprised that A is even an option, it sounds insecure!

upvoted 0 times

...

Kayleigh

1 month ago

C is definitely the way to go for secure channels.

upvoted 0 times

...

Val

2 months ago

I disagree, D could work just as well for encryption.

upvoted 0 times

...

Iola

2 months ago

C seems like the best option for secure access.

upvoted 0 times

...

Cordelia

2 months ago

Option C with Identity-Aware Proxy looks interesting, but it might be overkill for this use case.

upvoted 0 times

...

Junita

2 months ago

Haha, I bet the stakeholders would love to access the reports via a public Cloud Storage bucket. What could go wrong?

upvoted 0 times

...

Annett

3 months ago

I agree, using a Google-managed SSL certificate is a simple and effective way to encrypt the traffic.

upvoted 0 times

...

Simona

3 months ago

I feel like option D is just about encryption, but I wonder if it really addresses the need for a secure channel without authentication.

upvoted 0 times

...

Deane

3 months ago

I’m a bit confused about the Identity-Aware Proxy option. Does it really allow access without authentication?

upvoted 0 times

...

Chun

3 months ago

I think we practiced a similar question where we had to secure a web app, and I believe using an HTTP(S) load balancer was part of that solution.

upvoted 0 times

...

Chery

3 months ago

I remember discussing the importance of secure channels in our last study group, but I'm not sure if using a public IP is the right approach here.

upvoted 0 times

...

Norah

3 months ago

This is a tricky one, but I think I've got a good strategy. I'm going to carefully read through each option and consider the pros and cons of each approach before making a decision. I want to make sure I fully understand the implications of each choice.

upvoted 0 times

...

Aleta

4 months ago

I'm a little unsure about this one. I'm leaning towards option B, where we use Cloud Scheduler and Cloud Build to create an export and store it in a public Cloud Storage bucket. That way, we don't have to worry about securing a live dashboard.

upvoted 0 times

...

Evette

4 months ago

Okay, I'm feeling pretty confident about this one. I think option C is the best choice - using an Identity-Aware Proxy to secure the communication channel is a great way to control access without requiring authentication.

upvoted 0 times

...

Danica

4 months ago

Option D looks good too, but it lacks user authentication.

upvoted 0 times

...

Nettie

4 months ago

I think option C is the best. Secure access is crucial.

upvoted 0 times

...

Lashandra

4 months ago

Option D seems the most straightforward approach to secure the communication channel.

upvoted 0 times

...

Paris

5 months ago

Wait, why would we need a public IP? That sounds risky!

upvoted 0 times

...

Sue

5 months ago

Agreed! Identity-Aware Proxy adds a strong layer of security.

upvoted 0 times

...

Carmen

5 months ago

Hmm, this is an interesting one. I think option D might be the way to go - setting up an HTTPS load balancer with a Google-managed SSL certificate seems like a pretty straightforward and secure solution.

upvoted 0 times

...

Annmarie

5 months ago

I'm a bit confused by this question. It seems like we need to set up a secure channel for external stakeholders to access the reports, but I'm not sure which option is the best approach.

upvoted 0 times