Google Cloud Professional Cloud Developer — Question 350

Your company is planning a global event. You need to configure an event registration portal for the event. You have decided to deploy the registration service by using Cloud Run. Your company’s marketing team does not want to advertise the Cloud Run service URL. They want the registration portal to be accessed by using a personalized hostname or path in your custom domain URL pattern, for example,.example.com. How should you configure access to the service while following Google-recommended practices?

Answer options

• A. Configure Cloud Armor to block traffic on the Cloud Run service URL and allow reroutes from only the custom domain URL pattern.
• B. Set up an HAProxy on Compute Engine, and add routing rules for a custom domain to the Cloud Run service URL.
• C. Add a global external Application Load Balancer in front of the service, and configure a DNS record that points to the load balancer’s IP address.
• D. Create a CNAME record that points to the Cloud Run service URL.

Correct answer: C

Explanation

The correct answer is C because using a global external Application Load Balancer allows for better traffic management and can mask the Cloud Run service URL with a custom domain. Options A and B do not align with Google’s recommended practices for managing access in this scenario, and option D does not provide the necessary routing capabilities for secure access to the service.