Google Professional Cloud Network Engineer Question 312
Select 4Google Cloud PlatformYou are tasked with deploying a multi-service application in Google Kubernetes Engine (GKE) and want to implement service-to-service communication with strong authentication and observability. You decide to use Google Cloud Service Mesh to achieve this. Which steps are required to configure Cloud Service Mesh successfully?
- A
Enable the required APIs, including MeshCA and Anthos Config Management.
- B
Install the Istio control plane using the Google Cloud CLI.
- C
Label the GKE cluster with the
mesh_idto enroll it in the service mesh. - D
Configure a firewall rule to block all traffic to the Istio sidecar proxy.
- E
Apply a YAML configuration file to define service mesh policies and telemetry settings.
Show answer and explanation
Correct answers: A, B, C, E
Explanation
Configuring Google Cloud Service Mesh requires multiple steps, including enabling necessary APIs, deploying the Istio control plane, enrolling the GKE cluster in the mesh using a mesh_id label, and applying YAML configurations for policies and telemetry. While the Istio sidecar proxy is crucial for service-to-service communication, blocking its traffic would disrupt the mesh functionality, making Option 4 incorrect.
- A. Correct.
Enabling the required APIs, such as MeshCA and Anthos Config Management, is necessary for setting up Cloud Service Mesh because they provide essential functionality like certificate management and configuration synchronization.
- B. Correct.
Installing the Istio control plane using the Google Cloud CLI is a critical step for deploying the service mesh on GKE, as Istio is the underlying technology for Cloud Service Mesh.
- C. Correct.
Labeling the GKE cluster with the
mesh_idis required to enroll the cluster in the service mesh, enabling it to participate in the mesh's features like traffic management and security. - D. Incorrect.
Blocking all traffic to the Istio sidecar proxy is incorrect because the Istio sidecar proxy is a critical component of the service mesh, handling traffic routing and enforcing mesh policies.
- E. Correct.
Applying a YAML configuration file allows you to define service mesh policies, such as traffic management, security settings, and observability features, which are necessary to fully configure the service mesh.