Google Cloud Professional Cloud Developer — Question 263

You need to containerize a web application that will be hosted on Google Cloud behind a global load balancer with SSL certificates. You don’t have the time to develop authentication at the application level, and you want to offload SSL encryption and management from your application. You want to configure the architecture using managed services where possible. What should you do?

Answer options

• A. Host the application on Google Kubernetes Engine, and deploy an NGINX Ingress Controller to handle authentication.
• B. Host the application on Google Kubernetes Engine, and deploy cert-manager to manage SSL certificates.
• C. Host the application on Compute Engine, and configure Cloud Endpoints for your application.
• D. Host the application on Google Kubernetes Engine, and use Identity-Aware Proxy (IAP) with Cloud Load Balancing and Google-managed certificates.

Correct answer: D

Explanation

The correct answer is D because it allows for offloading SSL management and enables authentication with Identity-Aware Proxy, which is suitable for managed services. Options A and B require additional management of authentication and SSL certificates, while option C does not utilize the benefits of managed services and the global load balancing with SSL effectively.