Your company is planning a global event. You need to configure an event registration portal for the event. You have decided to deploy the registration service by using Cloud Run. Your company’s marketing team does not want to advertise the Cloud Run service URL. They want the registration portal to be accessed by using a personalized hostname or path in your custom domain URL pattern, for example, .example.com. How should you configure access to the service while following Google-recommended practices?

A. Configure Cloud Armor to block traffic on the Cloud Run service URL and allow reroutes from only the custom domain URL pattern. B. Set up an HAProxy on Compute Engine, and add routing rules for a custom domain to the Cloud Run service URL. C. Add a global external Application Load Balancer in front of the service, and configure a DNS record that points to the load balancer’s IP address. D. Create a CNAME record that points to the Cloud Run service URL.