Which THREE components are necessary to configure a global external HTTP(S) load balancer with Cloud CDN and an origin backend that requires authentication? (Choose three.)
Trap 1: A TCP or SSL proxy for protocol optimization.
Incorrect. TCP or SSL proxies are for Layer 4 traffic, not HTTP(S) load balancing. HTTP(S) load balancers handle HTTP/HTTPS requests directly.
Trap 2: A regional external HTTP(S) load balancer as the entry point.
Incorrect. Cloud CDN requires a global external HTTP(S) load balancer, not a regional one. Regional load balancers do not provide global edge caching.
Trap 3: Cloud Armor security policies to protect against attacks.
Incorrect. Cloud Armor provides security policies (e.g., WAF, DDoS protection) but is not necessary for the core functionality of load balancing with CDN and authenticated origin. It is an optional add-on.
- A
A TCP or SSL proxy for protocol optimization.
Why wrong: Incorrect. TCP or SSL proxies are for Layer 4 traffic, not HTTP(S) load balancing. HTTP(S) load balancers handle HTTP/HTTPS requests directly.
- B
A regional external HTTP(S) load balancer as the entry point.
Why wrong: Incorrect. Cloud CDN requires a global external HTTP(S) load balancer, not a regional one. Regional load balancers do not provide global edge caching.
- C
An origin access identity (e.g., service account) to authenticate to the backend.
Correct. When the origin backend requires authentication, an origin access identity (typically a service account) must be configured so that Cloud CDN can authenticate requests to the backend. This prevents direct unauthenticated access.
- D
A backend bucket configured with Cloud CDN enabled.
Correct. A backend bucket with Cloud CDN enabled is the standard setup for serving static content via Cloud CDN. The bucket must have Cloud CDN enabled to cache content at edge locations.
- E
Cloud Armor security policies to protect against attacks.
Why wrong: Incorrect. Cloud Armor provides security policies (e.g., WAF, DDoS protection) but is not necessary for the core functionality of load balancing with CDN and authenticated origin. It is an optional add-on.