Google Professional Cloud Network Engineer Question 582
Single answerGoogle Cloud PlatformYour organization is hosting a web application on Google Cloud using a backend service behind an HTTP(S) load balancer. The backend service needs to communicate with an external third-party API over a specific range of ports (5000-5100). To ensure proper configuration, you need to allocate these port ranges while avoiding potential port conflicts. How can you achieve this in Google Cloud?
- A
Configure a static port allocation in the backend service using the exact range of ports (5000-5100).
- B
Use dynamic port allocation in the backend service and restrict the range of allowed ports in the firewall rules.
- C
Manually assign static ports for each individual backend instance within the range of 5000-5100.
- D
Use dynamic port allocation on the backend service without any additional configuration.
Show answer and explanation
Correct answer: B
Explanation
In Google Cloud, backend services typically use dynamic port allocation for communication. To ensure secure and proper communication with an external third-party API over a specific port range, you need to configure a firewall rule to restrict the range of allowed ports (5000-5100). This approach avoids port conflicts and restricts external access to only the required range of ports. Static port allocation for ranges is not supported directly in backend services, and manually assigning ports is not scalable.
- A. Incorrect.
Static port allocation for a specific range (5000-5100) is not directly configurable within a backend service in Google Cloud. Backend services typically use dynamic port allocation, so this option is incorrect.
- B. Correct.
Using dynamic port allocation in the backend service and restricting the range of allowed ports in the firewall rules is the correct approach. This ensures that the backend service operates properly while limiting the allowed ports for external communication.
- C. Incorrect.
Manually assigning static ports for each backend instance is not a scalable or efficient solution. Backend services in Google Cloud are designed to handle dynamic port allocation, so this option is impractical.
- D. Incorrect.
Using dynamic port allocation without any additional configuration can lead to potential port conflicts or security issues if the backend service communicates over unrestricted ports.