Google Professional Cloud Network Engineer Question 289
Select 3Google Cloud PlatformYou are tasked with setting up a Google Kubernetes Engine (GKE) cluster that will host a production application. The cluster needs to handle high availability, support secure private communications, and allow for centralized network policy management. Which combination of configurations should you implement to meet these requirements?
- A
Enable private Google access and private clusters in the GKE configuration.
- B
Configure multi-zonal or regional clusters for high availability.
- C
Use Kubernetes NetworkPolicies to control traffic between pods.
- D
Disable VPC-native (alias IP) networking to simplify network management.
- E
Use a single-zone cluster for reduced cost and easier setup.
Show answer and explanation
Correct answers: A, B, C
Explanation
To meet the requirements for high availability, secure private communications, and centralized network policy management in a GKE cluster, you should enable private clusters, configure multi-zonal or regional clusters, and use Kubernetes NetworkPolicies. Private clusters ensure secure communications, multi-zonal or regional clusters provide redundancy and resiliency, and NetworkPolicies enable centralized traffic control.
- A. Correct.
Enabling private Google access and private clusters ensures that cluster nodes and pods communicate securely over private IPs and do not expose themselves to the public internet, meeting the security requirement.
- B. Correct.
Configuring multi-zonal or regional clusters ensures high availability by distributing nodes across multiple zones, reducing the risk of downtime from a single-zone failure.
- C. Correct.
Using Kubernetes NetworkPolicies allows you to define fine-grained rules to control the flow of traffic between pods, ensuring centralized network policy management.
- D. Incorrect.
Disabling VPC-native (alias IP) networking is not recommended as VPC-native networking simplifies pod-level IP management and enhances network performance, which is important for production workloads.
- E. Incorrect.
Using a single-zone cluster does not meet the high availability requirement, as it increases the risk of downtime if the zone goes offline.