nerdexam
Google

PROFESSIONAL-CLOUD-DEVOPS-ENGINEER · Question #206

You work for a company that manages highly sensitive user data. You are designing the Google Kubernetes Engine (GKE) infrastructure for your company, including several applications that will be…

The correct answer is C. Create one cluster for each environment (development and production) with each application in its. This approach ensures environmental isolation by having separate clusters for production and development, reducing the risk of unauthorized access or accidental data exposure between environments. Placing each application in its own namespace within these clusters further…

Submitted by lars.no· Apr 18, 2026Applying site reliability engineering principles to a service

Question

You work for a company that manages highly sensitive user data. You are designing the Google Kubernetes Engine (GKE) infrastructure for your company, including several applications that will be deployed in development and production environments. Your design must protect data from unauthorized access from other applications, while minimizing the amount of management overhead required. What should you do?

Options

  • ACreate one cluster for the organization with separate namespaces for each application and
  • BCreate one cluster for each application with separate namespaces for production and development
  • CCreate one cluster for each environment (development and production) with each application in its
  • DCreate one cluster for the organization with separate namespaces for each application.

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    5% (1)
  • C
    76% (16)
  • D
    14% (3)

Explanation

This approach ensures environmental isolation by having separate clusters for production and development, reducing the risk of unauthorized access or accidental data exposure between environments. Placing each application in its own namespace within these clusters further enhances security by using Kubernetes Role-Based Access Control (RBAC) and Network Policies to restrict access between applications. This solution minimizes management overhead while ensuring strong security and compliance for handling highly sensitive user data.

Topics

#GKE Infrastructure#Security Isolation#Namespace Management#Environment Management

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice