nerdexam
GoogleGoogle

PROFESSIONAL-CLOUD-DEVELOPER · Question #209

PROFESSIONAL-CLOUD-DEVELOPER Question #209: Real Exam Question with Answer & Explanation

The correct answer is D: Install Anthos Service Mesh, and enable mTLS in your Service Mesh.. https://cloud.google.com/service-mesh/docs/overview#security_benefits - Ensures encryption in transit. Using mTLS for authentication also ensures that all TCP communications are encrypted in transit.

Implementing security for microservices on GKE

Question

You are planning to deploy hundreds of microservices in your Google Kubernetes Engine (GKE) cluster. How should you secure communication between the microservices on GKE using a managed service?

Options

  • AUse global HTTP(S) Load Balancing with managed SSL certificates to protect your services
  • BDeploy open source Istio in your GKE cluster, and enable mTLS in your Service Mesh
  • CInstall cert-manager on GKE to automatically renew the SSL certificates.
  • DInstall Anthos Service Mesh, and enable mTLS in your Service Mesh.

Explanation

https://cloud.google.com/service-mesh/docs/overview#security_benefits - Ensures encryption in transit. Using mTLS for authentication also ensures that all TCP communications are encrypted in transit.

Topics

#GKE#Microservices Security#Service Mesh#mTLS

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DEVELOPER PracticeBrowse All PROFESSIONAL-CLOUD-DEVELOPER Questions