Exam Professional Cloud Security Engineer topic 1 question 50 discussion

Although both TCP Proxy LB and SSL Proxy LB support port 587 but only SSL Proxy LB support TLS. Hence 'D' is the right answer.

Answer D https://cloud.google.com/load-balancing/docs/ssl - SSL Proxy Load Balancing is a reverse proxy load balancer that distributes SSL traffic coming from the internet to virtual machine (VM) instances in your Google Cloud VPC network. When using SSL Proxy Load Balancing for your SSL traffic, user SSL (TLS) connections are terminated at the load balancing layer, and then proxied to the closest available backend instances by using either SSL (recommended) or TCP.

"D" Although port 587 is SMTP (mail) which is an Application Layer protocol, and one might think an Application Layer (HTTPs) Load balancer is needed, according to Google docs, Application Layer LBs offload TLS at GFE which may or may not be the LB. Only the Network Proxy LB confirms TLS offloading at LB layer. Also, as a general rule, they recommend Network Proxy LB for TLS Offloading: "..As a general rule, you'd choose an Application Load Balancer when you need a flexible feature set for your applications with HTTP(S) traffic. You'd choose a proxy Network Load Balancer to implement TLS offload.." References: https://cloud.google.com/load-balancing/docs/choosing-load-balancer#flow_chart https://cloud.google.com/load-balancing/docs/https#control-tls-termination

We can use an HTTPS load balancer and change the backend services port to 587 .| HTTPS load balacer will also work

Answer D. SSL Proxy Load Balancing https://cloud.google.com/load-balancing/docs/ssl

Answer: D

Ans : D

Ans - D

D is the answer. SSL Proxy LoadBalancer supports TLS.

Agreed with smart123. Ans is D https://cloud.google.com/load-balancing/docs/choosing-load-balancer#flow_chart