Google Professional Cloud DevOps Engineer Question 42
Select 2Google Cloud PlatformYour enterprise runs multiple Google Kubernetes Engine (GKE) clusters across different Google Cloud projects to support various teams. You need to ensure consistent configuration, policy enforcement, and workload management across all GKE clusters. Which of the following solution(s) would help you achieve this requirement efficiently?
- A
Use Anthos Config Management to define and enforce consistent cluster configurations and policies across all GKE clusters.
- B
Manually configure each GKE cluster using kubectl and maintain a centralized document for cluster management.
- C
Enable Workload Identity to manage access control for workloads running on all GKE clusters.
- D
Use Cloud Operations Suite (formerly Stackdriver) to monitor and visualize the performance of all GKE clusters.
- E
Leverage Anthos Service Mesh to enforce uniform service-to-service security and observability across clusters.
Show answer and explanation
Correct answers: A, E
Explanation
To manage GKE clusters effectively across an enterprise, you need tools that provide centralized control and automation. Anthos Config Management ensures consistent configuration and policy enforcement, while Anthos Service Mesh provides a unified service-to-service security and observability layer. These tools are designed to handle the complexity of managing GKE clusters across multiple projects and teams, making them the best solutions for this scenario.
- A. Correct.
Correct: Anthos Config Management provides a way to define and enforce consistent configurations and policies across multiple GKE clusters, regardless of their location or project, making it an efficient solution for managing enterprise-scale GKE deployments.
- B. Incorrect.
Incorrect: Manually configuring each cluster is error-prone, time-consuming, and does not scale well for managing multiple clusters across projects.
- C. Incorrect.
Incorrect: While Workload Identity is useful for managing access control for applications, it does not address consistent cluster configuration or policy enforcement.
- D. Incorrect.
Incorrect: Cloud Operations Suite is a powerful monitoring tool but is not designed for enforcing configuration or policies across GKE clusters.
- E. Correct.
Correct: Anthos Service Mesh provides consistent service-to-service security, observability, and traffic management across multiple GKE clusters. This complements Anthos Config Management for unified cluster governance.