Google Professional Cloud Network Engineer Question 256
Select 4Google Cloud PlatformYou are configuring a Google Cloud environment to route traffic from a specific subnet to an internal application hosted on a group of Compute Engine instances. To ensure high availability and scalability, you decide to use an internal TCP/UDP load balancer as a next hop. Which of the following steps are required to implement this configuration correctly?
- A
Create an internal TCP/UDP load balancer and configure a backend service pointing to the instance group.
- B
Define a firewall rule to allow traffic from the subnet to the internal load balancer on the appropriate ports.
- C
Create a custom static route in the VPC, specifying the internal load balancer's IP address as the next hop.
- D
Assign a reserved external IP address to the internal load balancer to ensure it is reachable from within the VPC.
- E
Ensure that the Compute Engine instances configured as backends are in the same region as the internal load balancer.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To implement an internal load balancer as a next hop, you need to configure the load balancer with a backend service, allow traffic via firewall rules, and create a custom static route pointing to the load balancer's internal IP. Additionally, the backend instances must be in the same region as the load balancer since it operates regionally. Assigning an external IP is not applicable here, as internal load balancers are designed specifically for handling internal traffic.
- A. Correct.
Correct. The internal TCP/UDP load balancer uses a backend service to route traffic to the appropriate instance group. This step is necessary to direct traffic to the intended application.
- B. Correct.
Correct. A firewall rule is required to allow traffic from the source subnet to the load balancer on the needed ports (e.g., TCP/UDP). Without this, traffic would be blocked.
- C. Correct.
Correct. To route traffic to the internal load balancer, a custom static route must be created, specifying the load balancer's IP as the next hop.
- D. Incorrect.
Incorrect. Internal load balancers use an internal IP address, not an external one, as they are designed for internal traffic only. Assigning an external IP is neither necessary nor possible in this scenario.
- E. Correct.
Correct. Internal load balancers and their backend instances must be in the same region because they are regional resources and do not span multiple regions.