GCP Associate Cloud Engineer Practice Question

Your company runs a stateless web application in managed instance groups located in us-central1, europe-west1, and asia-east1. You must expose the service over HTTPS so that users worldwide reach the nearest healthy backend through a single public IP address. Additional requirements are automatic cross-regional failover, path-based routing, HTTP/2 and gRPC support, and no TLS certificate management on the VMs. Which Google Cloud solution best meets these needs?

Establish Cloud VPN tunnels from each region to a third-party CDN and advertise the CDN's anycast address to users.
Deploy a regional network load balancer with TCP forwarding rules and terminate TLS on each VM instance.
Configure a global external HTTP(S) load balancer in Premium Tier and attach the regional managed instance groups as back-end services.
Create a separate regional external HTTP(S) load balancer in each region and use Cloud DNS geo-location records to route clients to the nearest IP address.

Report Issue

Answer Description

A global external HTTP(S) load balancer operates at Google's edge using the Premium Network Service Tier. It provides a single anycast IPv4/IPv6 address announced from Google points of presence worldwide, automatically directs traffic to the closest healthy backend, performs cross-regional failover, supports path-based routing, HTTP/2, and gRPC, and offloads SSL/TLS with Google-managed certificates. Regional external HTTP(S) load balancers require multiple regional IPs and cannot shift traffic across regions. Network load balancers work at layer 4, lack content-based routing, and require TLS termination on each VM. Sending traffic through Cloud VPN to a third-party CDN does not provide an integrated Google Cloud load-balancing solution and adds unnecessary complexity.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.