Google Cloud Professional Cloud Architect PCA — Topic 1 Question 214

Question

You are designing the network architecture for a public-facing, containerized web application deployed on Cloud Run. All incoming traffic must be inspected by a Cloud Armor web application firewall (WAF) before reaching the application You plan to use an Application Load Balancer, which will have the Cloud Armor policy attached. You must ensure that all public requests pass through the load balancer and any attempt to access the Cloud Run service directly through its default *.run.app URL is blocked. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Set the Cloud Run ingress to Allow internal traffic and Cloud Load Balancing, and use a serverless NEG backend on the load balancer Cloud Run runs stateless containers serverlessly and scales to zero, minimizing operational overhead. Cloud Load Balancing distributes traffic across regions and backends for availability and scale. A load balancer distributes traffic across healthy backends in multiple zones for availability and scale.

Google Cloud Professional Cloud Architect PCA — Question 214