Google Professional Cloud Network Engineer Question 616
Select 3Google Cloud PlatformYou are designing a highly available architecture for a multi-NIC VM acting as a firewall in Google Cloud. To ensure uninterrupted traffic flow during VM maintenance or failures, you configure an internal load balancer as the next hop for routing. Which of the following steps are required to achieve this setup?
- A
Create a regional internal load balancer with a backend service containing the firewall VM's primary NIC.
- B
Configure the route table to use the internal load balancer's IP address as the next hop for traffic destined to the internet.
- C
Attach a health check to the internal load balancer to monitor the health of the firewall VM.
- D
Configure a static route in the VPC network to direct traffic to the internal load balancer.
- E
Enable IP forwarding on the firewall VM to allow it to forward packets between networks.
Show answer and explanation
Correct answers: A, C, E
Explanation
To configure an internal load balancer as the next hop for a multi-NIC VM acting as a firewall, you need to set up a regional internal load balancer with the VM's primary NIC in the backend service, attach a health check to monitor the VM's status, and enable IP forwarding on the VM for proper packet forwarding. Internal load balancers are for internal traffic only, so they cannot be used to route traffic to the internet, and static routes to the load balancer are unnecessary since it automatically handles traffic routing to its backend.
- A. Correct.
Correct. The internal load balancer must be set up with a backend service that includes the primary NIC of the firewall VM to distribute traffic.
- B. Incorrect.
Incorrect. Internal load balancers are for internal traffic only and cannot be used for routing traffic to the internet.
- C. Correct.
Correct. A health check is necessary for the internal load balancer to verify the reachability and health of the firewall VM.
- D. Incorrect.
Incorrect. Static routes to the internal load balancer are not required; the internal load balancer operates at Layer 4 and automatically handles traffic routing to its backend.
- E. Correct.
Correct. Enabling IP forwarding on the firewall VM is required to allow it to forward packets between its NICs.