Exam Professional-Cloud-Security-Engineer Topic 3 Question 152 Discussion
Actual exam question for Google's Professional-Cloud-Security-Engineer exam
Question #: 152
Topic #: 3
Question #: 152
Topic #: 3
Your organization's Google Cloud VMs are deployed via an instance template that configures them with a public IP address in order to host web services for external users. The VMs reside in a service project that is attached to a host (VPC) project containing one custom Shared VPC for the VMs. You have been asked to reduce the exposure of the VMs to the internet while continuing to service external users. You have already recreated the instance template without a public IP address configuration to launch the managed instance group (MIG). What should you do?
Suggested Answer: D Vote an answer
External HTTP(S) Load Balancer: Deploy an external HTTP(S) load balancer to manage traffic to your VMs.
This load balancer will handle incoming traffic from the internet while the VMs themselves do not have public IP addresses.
Host (VPC) Project Deployment: Deploy the load balancer in the host (VPC) project. This allows for centralized management of network resources and maintains the integrity of your shared VPC configuration.
Backend Configuration: Configure the MIG as the backend for the load balancer. This setup ensures that the VMs can still serve external users while reducing their direct exposure to the internet. This solution provides the required access to external users through the load balancer, enhancing security by not exposing individual VM IP addresses. References:
Google Cloud - External HTTP(S) Load Balancer Overview
Google Cloud - Shared VPC Overview
This load balancer will handle incoming traffic from the internet while the VMs themselves do not have public IP addresses.
Host (VPC) Project Deployment: Deploy the load balancer in the host (VPC) project. This allows for centralized management of network resources and maintains the integrity of your shared VPC configuration.
Backend Configuration: Configure the MIG as the backend for the load balancer. This setup ensures that the VMs can still serve external users while reducing their direct exposure to the internet. This solution provides the required access to external users through the load balancer, enhancing security by not exposing individual VM IP addresses. References:
Google Cloud - External HTTP(S) Load Balancer Overview
Google Cloud - Shared VPC Overview
by Leif at Jun 08, 2026, 03:24 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).