Hard1 markMultiple Choice
Subtask 2.3: Compute SystemsGKEAutopilotKubernetesSecurity

GCP PCA · Question 25 · Compute Systems

Your development team wants to deploy a microservices application to Google Kubernetes Engine (GKE). The application has highly variable traffic. The operations team is currently understaffed and wants to minimize the time spent managing node pools, OS upgrades, and capacity planning. However, the security team requires that the cluster uses Workload Identity and is entirely private (no public IP addresses for nodes). Which GKE configuration should you choose?

Answer options:

A.

Deploy a GKE Standard cluster, enable cluster autoscaling, and configure private nodes.

B.

Deploy the application to Cloud Run instead of GKE.

C.

Deploy a GKE Autopilot private cluster.

D.

Deploy a GKE Standard cluster and use Anthos Service Mesh to manage traffic.

How to approach this question

Balance the need for Kubernetes with the need for zero node management. Ensure the solution supports private networking.

Full Answer

C.Deploy a GKE Autopilot private cluster.✓ Correct
Deploy a GKE Autopilot private cluster.
GKE Autopilot is a mode of operation where Google manages the cluster infrastructure, including nodes, scaling, and security patches. You pay only for the pods' requested resources. It perfectly addresses the understaffed ops team. Furthermore, Autopilot fully supports enterprise security features like Private Clusters and enforces Workload Identity by default.

Common mistakes

Assuming GKE Autopilot doesn't support private clusters or advanced security features. Autopilot is designed for production enterprise workloads.

Practice the full GCP Professional Cloud Architect Practice Exam 7

50 questions · hints · full answers · grading

More questions from this exam