Your company runs a three-tier application on Compute Engine within a single VPC. The web tier needs to distribute internal-only TCP traffic to a group of backend application VMs in the same region. The backend VMs must not be reachable from the public internet, and clients (the web tier VMs) are within the same VPC. Which Cloud Load Balancing option should you configure?