Google Professional Cloud Network Engineer Question 314
Select 4Google Cloud PlatformYour organization is deploying a microservices-based application on Google Kubernetes Engine (GKE) and wants to implement a service mesh to manage traffic between services, enforce security policies, and gain observability. You decide to use Google Cloud's managed service mesh solution. What steps must you take to configure Cloud Service Mesh with Anthos Service Mesh on your GKE cluster?
- A
Install the Anthos Service Mesh components on your GKE cluster using the provided installation script.
- B
Enable the required Google Cloud APIs, such as Anthos Service Mesh API and Cloud Monitoring API, for your project.
- C
Manually configure mutual TLS (mTLS) for each service by updating the application code.
- D
Ensure your GKE cluster meets the prerequisites, such as having Workload Identity enabled and a supported Kubernetes version.
- E
Deploy sidecar proxies (Envoy) for each service by modifying your Kubernetes YAML files to include the sidecar container.
- F
Use the Google Cloud Console or gcloud commands to register your GKE cluster with Anthos Service Mesh.
Show answer and explanation
Correct answers: A, B, D, F
Explanation
To configure Cloud Service Mesh with Anthos Service Mesh on GKE, you must install the necessary components, enable required APIs, and ensure your cluster meets the prerequisites. Anthos Service Mesh automates the injection of sidecar proxies and manages mTLS for you. Registering your cluster integrates it with Anthos Service Mesh and enables its full range of features. This ensures secure, observable, and manageable communication between services running in your cluster.
- A. Correct.
Correct: Installing the Anthos Service Mesh components is a required step to configure Cloud Service Mesh on GKE, as it sets up the control plane and components necessary for the service mesh.
- B. Correct.
Correct: Enabling the required APIs is crucial for the functionality of Anthos Service Mesh, including observability and security features.
- C. Incorrect.
Incorrect: Mutual TLS (mTLS) is managed automatically by Anthos Service Mesh, and you do not need to modify your application code for this.
- D. Correct.
Correct: Ensuring that your GKE cluster meets the prerequisites, such as enabling Workload Identity and running a supported Kubernetes version, is necessary for a successful Anthos Service Mesh deployment.
- E. Incorrect.
Incorrect: Sidecar proxies (e.g., Envoy) are injected automatically by Anthos Service Mesh during the deployment process and do not require manual modifications to Kubernetes YAML files.
- F. Correct.
Correct: Registering your GKE cluster with Anthos Service Mesh is a required step to enable its managed features and integrate it with Google Cloud.