nerdexam
GoogleGoogle

PROFESSIONAL-CLOUD-DEVELOPER · Question #194

PROFESSIONAL-CLOUD-DEVELOPER Question #194: Real Exam Question with Answer & Explanation

The correct answer is C: The Authorization Policy of your cluster is blocking HTTP requests for specific paths within your. An Istio Authorization policy allows you to block HTTP methods between pods for specific URL https://istio.io/latest/docs/ops/common-problems/network-issues/#sending-https-to-an-http-port

Monitoring, logging, and troubleshooting applications

Question

You manage a microservices application on Google Kubernetes Engine (GKE) using Istio. You secure the communication channels between your microservices by implementing an Istio AuthorizationPolicy, a Kubernetes NetworkPolicy, and mTLS on your GKE cluster. You discover that HTTP requests between two Pods to specific URLs fail, while other requests to other URLs succeed. What is the cause of the connection issue?

Options

  • AA Kubernetes NetworkPolicy resource is blocking HTTP traffic between the Pods.
  • BThe Pod initiating the HTTP requests is attempting to connect to the target Pod via an incorrect
  • CThe Authorization Policy of your cluster is blocking HTTP requests for specific paths within your
  • DThe cluster has mTLS configured in permissive mode, but the Pod's sidecar proxy is sending

Explanation

An Istio Authorization policy allows you to block HTTP methods between pods for specific URL https://istio.io/latest/docs/ops/common-problems/network-issues/#sending-https-to-an-http-port

Topics

#Istio#AuthorizationPolicy#Microservices Security#GKE

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DEVELOPER PracticeBrowse All PROFESSIONAL-CLOUD-DEVELOPER Questions