Q: **CASE STUDY: HealthCare360** **Company Overview:** HealthCare360 provides EHR systems to hospitals in NA and EU. **Current Environment:** Isolated on-prem deployments. Fragmented data. **Business Requirements:** Centralize EHR in cloud. Enable cross-hospital research. Ensure compliance. **Executive Statements:** CEO: 'Transforming to SaaS.' CFO: 'Need cost attribution per tenant.' CSO: 'Zero compromise on HIPAA/GDPR.' **Technical Requirements:** Multi-region active-active deployment. Microservices on GKE. End-to-end encryption (CMEK). Strict network perimeters. **Constraints:** Zero data loss (RPO=0). RTO < 15 minutes. HIPAA (US) and GDPR (EU) compliance. **QUESTION:** How should you configure the GKE clusters to ensure the highest level of network security and isolation for the microservices?

Combine network isolation (Private Clusters) with identity isolation (Workload Identity).

Q: What mistakes do candidates make on this GCP PCA question?

Using Node Service Accounts, which grants all pods on a node the same permissions, violating least privilege.

Question 1

**CASE STUDY: HealthCare360**

**Company Overview:** HealthCare360 provides EHR systems to hospitals in NA and EU.
**Current Environment:** Isolated on-prem deployments. Fragmented data.
**Business Requirements:** Centralize EHR in cloud. Enable cross-hospital research. Ensure compliance.
**Executive Statements:** CEO: 'Transforming to SaaS.' CFO: 'Need cost attribution per tenant.' CSO: 'Zero compromise on HIPAA/GDPR.'
**Technical Requirements:** Multi-region active-active deployment. Microservices on GKE. End-to-end encryption (CMEK). Strict network perimeters.
**Constraints:** Zero data loss (RPO=0). RTO < 15 minutes. HIPAA (US) and GDPR (EU) compliance.

**QUESTION:**
How should you configure the GKE clusters to ensure the highest level of network security and isolation for the microservices?

Accepted Answer

Combine network isolation (Private Clusters) with identity isolation (Workload Identity).

Question 2

What mistakes do candidates make on this GCP PCA question?

Accepted Answer

Using Node Service Accounts, which grants all pods on a node the same permissions, violating least privilege.

How to approach this question

Full Answer

Common mistakes

Practice the full GCP Professional Cloud Architect Practice Exam 1

More questions from this exam