ExamTopics Logo
Mail Us[email protected]
Menu
Google Discussions
exam questions

Exam Professional Cloud Developer All Questions

View all questions & answers for the Professional Cloud Developer exam
Go to Exam

Exam Professional Cloud Developer topic 1 question 196 discussion

Actual exam question from Google's Professional Cloud Developer
Question #: 196
Topic #: 1
[All Professional Cloud Developer Questions]

Your team is responsible for maintaining an application that aggregates news articles from many different sources. Your monitoring dashboard contains publicly accessible real-time reports and runs on a Compute Engine instance as a web application. External stakeholders and analysts need to access these reports via a secure channel without authentication. How should you configure this secure channel?

  • A. Add a public IP address to the instance. Use the service account key of the instance to encrypt the traffic.
  • B. Use Cloud Scheduler to trigger Cloud Build every hour to create an export from the reports. Store the reports in a public Cloud Storage bucket.
  • C. Add an HTTP(S) load balancer in front of the monitoring dashboard. Configure Identity-Aware Proxy to secure the communication channel.
  • D. Add an HTTP(S) load balancer in front of the monitoring dashboard. Set up a Google-managed SSL certificate on the load balancer for traffic encryption.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by melisargh at Dec. 12, 2022, 5:41 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
__rajan__
6 months ago
Selected Answer: D
D. Add an HTTP(S) load balancer in front of the monitoring dashboard. Set up a Google-managed SSL certificate on the load balancer for traffic encryption. This option provides the most secure way to configure a publicly accessible channel for your monitoring dashboard without authentication. The HTTP(S) load balancer will distribute traffic to the backend instances of the dashboard, and the Google-managed SSL certificate will encrypt all traffic between the load balancer and the users.
upvoted 2 times
...
__rajan__
7 months ago
Selected Answer: D
This approach is the most secure and reliable way to configure a secure channel for external stakeholders and analysts to access the publicly accessible real-time reports in your monitoring dashboard.
upvoted 2 times
...
purushi
8 months, 3 weeks ago
Selected Answer: D
SSL/TLS is must for data in transit encryption. Since without authentication, D is more suitable option. If authentication required, then we could have chosen C.
upvoted 3 times
...
TNT87
1 year, 4 months ago
Answer D https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs
upvoted 1 times
...
x_cath
1 year, 4 months ago
Selected Answer: D
A is incorrect. A service account cannot be used to encrypt HTTPS traffic. B is incorrect. Periodical export would not meet the real-time requirement. C is incorrect. IAP is not securing the communication channel, it authenticates the user. Technically Cloud Load Balancing already secures the channel but without an appropriate certificate. D is correct. This provides an external HTTPS endpoint, and uses Google-managed services and a valid SSL certificate.
upvoted 4 times
...
sharath25
1 year, 4 months ago
Selected Answer: D
option D
upvoted 1 times
...
zellck
1 year, 4 months ago
Selected Answer: D
D is the answer.
upvoted 2 times
...
melisargh
1 year, 4 months ago
Selected Answer: D
D is correct. This provides an external HTTPS endpoint, and uses Google-managed services and a valid SSL certificate. https://cloud.google.com/load-balancing/docs/ssl-certificates/google-managed-certs
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago