Question

Your company runs an internal microservices platform behind a regional internal Application Load Balancer in the us-central1 region. Security requires that traffic from internal clients to the load balancer be encrypted with TLS using a certificate issued by the company's internal private certificate authority (not a public CA). You need to configure the HTTPS frontend of the internal Application Load Balancer. Which approach correctly provisions the certificate?

Accepted Answer

Create a regional self-managed SSL certificate resource containing the private CA-issued certificate and private key, and attach it to the regional target HTTPS proxy.

Answer

Create a Google-managed SSL certificate resource and attach it to the target HTTPS proxy; Google will automatically obtain and renew it.

Answer

Upload the certificate to Cloud CDN and enable origin TLS; the internal load balancer will inherit the certificate automatically.

Answer

Create a global self-managed SSL certificate and attach it to the internal Application Load Balancer's global target HTTPS proxy.