Google Professional Cloud Network Engineer Question 257
Select 4Google Cloud PlatformYou are designing a Google Cloud network for a company that requires all internal traffic between Virtual Machine (VM) instances in different subnets to pass through a centralized security appliance for inspection. You decide to use an internal load balancer as a next hop to achieve this. Which of the following steps are required to implement this configuration?
- A
Create an internal TCP/UDP load balancer and assign it a private IP address.
- B
Configure a backend service for the load balancer that includes the security appliance VM instance group.
- C
Create a static route that uses the internal load balancer's IP address as the next hop.
- D
Enable private Google access on the subnets that will use the internal load balancer.
- E
Configure the firewall rules to allow traffic between the source subnets and the internal load balancer.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
To use an internal load balancer as a next hop, you need to configure it properly to direct traffic through a centralized security appliance. Creating the internal load balancer, setting up its backend service with the security appliance, and defining a static route for traffic with the load balancer's private IP as the next hop are key steps. Additionally, firewall rules must be configured to allow traffic between the source subnets and the load balancer. However, enabling private Google access is unrelated to this configuration.
- A. Correct.
Correct: An internal TCP/UDP load balancer is required to act as a next hop for directing traffic to the security appliance.
- B. Correct.
Correct: The backend service of the internal load balancer must include the security appliance VM instance group to ensure traffic is inspected.
- C. Correct.
Correct: A static route is necessary to direct traffic to the internal load balancer's IP address as the next hop, enabling centralized traffic inspection.
- D. Incorrect.
Incorrect: Enabling private Google access is not required for this use case. It is used for accessing Google APIs and services without a public IP.
- E. Correct.
Correct: Firewall rules are needed to allow traffic between the source subnets and the internal load balancer to ensure connectivity.