PROFESSIONAL-CLOUD-DEVELOPER Question #345: Real Exam Question with Answer & Explanation

Question

Your team has created an application that is hosted on a GKE cluster. You need to connect the application to a REST service that is deployed in two GKE clusters in two different regions. How should you set up the connection and health checks? (Choose two.)

Options

• AUse Cloud Service Mesh with sidecar proxies to connect the application to the REST service.
• BUse Cloud Service Mesh with proxyless gRPC to connect the application to the REST service.
• CConfigure the REST service's firewall to allow health checks originating from the GKE service's IP
• DConfigure the REST service's firewall to allow health checks originating from the GKE control
• EConfigure the REST service's firewall to allow health checks originating from the GKE check

Explanation

Use Cloud Service Mesh with sidecar proxies: Cloud Service Mesh (based on Istio) is an effective solution for connecting services across multiple GKE clusters and regions. The sidecar proxies can manage and secure traffic between the application and the REST service, providing features like traffic routing, observability, and resilience. Configure the REST service's firewall to allow health checks originating from the GKE check probe’s IP ranges: Health checks for services deployed in GKE often originate from specific probe IP ranges. Configuring the firewall to allow these probes ensures that health checks can pass through to the REST service, allowing GKE to monitor the availability and health of the REST service effectively. Options involving proxyless gRPC and control plane IP ranges are not applicable for REST services and are not the best practices for managing firewall rules for health checks in this

No community discussion yet for this question.