Google Professional Cloud Network Engineer Question 584
Select 3Google Cloud PlatformYou are tasked with configuring a Google Cloud Load Balancer for a web application. The application requires that specific ports remain static for external client connections, but it also needs to dynamically allocate ephemeral ports for backend instances to communicate. How should you configure the port allocations to meet these requirements?
- A
Configure the frontend load balancer to use a static port for client connections.
- B
Configure backend instances to use static ports for communication with the frontend load balancer.
- C
Allow the backend instances to use dynamically allocated ephemeral ports for internal communication.
- D
Enable static port allocation for all backend instances and disable ephemeral ports.
- E
Configure a firewall rule to allow traffic only on the specific static ports used by the frontend load balancer.
Show answer and explanation
Correct answers: A, C, E
Explanation
To configure port allocations for a Google Cloud Load Balancer, static ports are required for frontend load balancer connections to ensure consistent access for clients. Backend instances, however, use ephemeral ports for internal communication. Additionally, firewall rules must permit traffic on the specific static ports to allow external access while maintaining security. Combining these configurations ensures proper functionality and security of the load balancer setup.
- A. Correct.
This is correct because the frontend load balancer needs a static port (e.g., port 80 or 443) for external client connections, ensuring consistent access.
- B. Incorrect.
This is incorrect because backend instances typically use ephemeral ports for dynamic communication with the frontend load balancer, not static ports.
- C. Correct.
This is correct because backend instances dynamically allocate ephemeral ports for internal communication, which is a standard practice.
- D. Incorrect.
This is incorrect because disabling ephemeral ports for backend instances would limit their ability to communicate effectively with other services.
- E. Correct.
This is correct because firewall rules need to allow traffic on the static ports configured for the frontend load balancer to enable external access.