Google Professional Cloud Network Engineer Question 431
Select 3Google Cloud PlatformYou are configuring a protocol forwarding rule to allow external traffic to reach an on-premises application running on a private IP address through Google Cloud. Which of the following steps are required to correctly configure protocol forwarding in this scenario?
- A
Create a forwarding rule that specifies the external IP address and port.
- B
Configure a target instance to handle the traffic from the forwarding rule.
- C
Set up a firewall rule to allow traffic from the protocol forwarding IP address.
- D
Create a Cloud Armor policy to block unauthorized IPs.
- E
Attach a Load Balancer to distribute traffic across multiple on-premises servers.
Show answer and explanation
Correct answers: A, B, C
Explanation
Protocol forwarding enables you to forward traffic from an external IP address to a specific target instance. To configure it, you need a forwarding rule defining the external IP, a target instance to handle the traffic, and a firewall rule to permit the traffic. Additional features like Cloud Armor and Load Balancers are optional and not required for basic protocol forwarding functionality.
- A. Correct.
Correct. A forwarding rule is required to define the external IP, protocol, and port for routing traffic to the target instance.
- B. Correct.
Correct. A target instance is necessary to forward traffic to the backend, such as an on-premises application in this case.
- C. Correct.
Correct. A firewall rule is needed to allow traffic from the external forwarding rule's IP address and port to the target instance.
- D. Incorrect.
Incorrect. While Cloud Armor can enhance security, it is not mandatory for setting up protocol forwarding.
- E. Incorrect.
Incorrect. A load balancer is not required for protocol forwarding, which directly forwards traffic to a single target instance.