Answer-first summary for fast verification
Answer: Deploy an external HTTP(S) load balancer in the service project with the MIG as a backend.
The correct answer is C because deploying an external HTTP(S) load balancer in the service project with the MIG as a backend aligns with Google Cloud best practices for Shared VPC environments. This approach minimizes VM exposure by using the load balancer as the public-facing endpoint while keeping VMs private (without public IPs). The load balancer components (IP, forwarding rule, proxy, URL map) must reside in the same project as the backends (the MIG in the service project), as per Google's documentation. Options A and B (Cloud NAT) are incorrect because Cloud NAT handles outbound traffic from VMs to the internet, not inbound traffic from external users. Option D is suboptimal because placing the load balancer in the host project complicates separation of duties and may not align with the service project's ownership of the MIG, though it is technically possible. The community discussion strongly supports C, with high upvotes and references to official documentation confirming that load balancer components should be in the service project for Shared VPC setups.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
Your organization's Google Cloud VMs, which host web services for external users, are deployed in a service project using a Shared VPC from a host project. The original instance template configured these VMs with public IP addresses. To reduce their internet exposure while still serving external users, you have recreated the instance template without a public IP and deployed it to a managed instance group (MIG). What is the next step you should take?
A
Deploy a Cloud NAT Gateway in the service project for the MIG.
B
Deploy a Cloud NAT Gateway in the host (VPC) project for the MIG.
C
Deploy an external HTTP(S) load balancer in the service project with the MIG as a backend.
D
Deploy an external HTTP(S) load balancer in the host (VPC) project with the MIG as a backend.