Google Cloud Certified Professional Cloud Network Engineer Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  The obvious solution here is a load balancer that will do pass-through SSL. You can't do pass-through SSL on an Application Load Balancer for HTTP(S), since that would require you have to have the certificate. So (C) is eliminated. So then the question is, do you use a pure passthrough Network Load Balancer, or do you want a TCP proxy load balancer? The key requirement is for end-to-end encryption with no TCP termination on the load balancer itself, since you don't have the certificate. SSL proxy (A) and TCP proxy (D) are both proxy load balancers, thus both require the client connection to be terminated on the load balancer, which would require you to have the certificate on the load balancer. So those choices are eliminated. The only remaining choice is a Passthrough Network Load Balancer (B).

• Chose B1

  No access to SSL then you cannot do SSL offloading, you should do passthrough and let the backend deal with the SSL part

• 2

  actually correcting myself answer is D TCP proxy load balancer, you have an option to use SSL offload but you don't have to. so you do not need access to the SSL certificates and still make use of the Global availability