Google Professional Cloud Network Engineer Question 176
Single answerGoogle Cloud PlatformYou are deploying a GKE cluster for a new application that processes sensitive customer data. The application must comply with compliance requirements that mandate restricted public internet exposure. Additionally, the application needs to securely access private resources within the same VPC. Which configuration should you choose for the GKE nodes and node pools?
- A
Use private cluster nodes and configure node pools with private IPs only
- B
Use public cluster nodes and configure node pools with public IPs
- C
Use public cluster nodes but configure node pools with private IPs only
- D
Use private cluster nodes and configure node pools with public IPs
Show answer and explanation
Correct answer: A
Explanation
To minimize public internet exposure and meet compliance requirements, private clusters should be used. Private clusters restrict access to the control plane and nodes from the public internet. Additionally, configuring node pools with private IPs ensures secure communication within the VPC and prevents public accessibility.
- A. Correct.
This is the correct choice because private cluster nodes and private IPs ensure the nodes and node pools are not accessible from the public internet, meeting the compliance requirements.
- B. Incorrect.
This is incorrect because public cluster nodes and public IPs expose the nodes to the public internet, which violates the compliance requirements.
- C. Incorrect.
This is partially incorrect because although node pools are configured with private IPs, using public cluster nodes still allows the control plane to be exposed to the public internet, which is not secure for sensitive data.
- D. Incorrect.
This is incorrect because public IPs on private cluster nodes negate the security benefits of a private cluster, leaving the nodes publicly accessible.