Google Professional Cloud Developer Exam - Topic 12 Question 52 Discussion

Actual exam question for Google's Professional Cloud Developer exam

Question #: 52
Topic #: 12

[All Professional Cloud Developer Questions]

Your security team is auditing all deployed applications running in Google Kubernetes Engine. After completing the audit, your team discovers that some of the applications send traffic within the cluster in clear text. You need to ensure that all application traffic is encrypted as quickly as possible while minimizing changes to your applications and maintaining support from Google. What should you do?

AUse Network Policies to block traffic between applications.

BInstall Istio, enable proxy injection on your application namespace, and then enable mTLS.

CDefine Trusted Network ranges within the application, and configure the applications to allow traffic only from those networks.

DUse an automated process to request SSL Certificates for your applications from Let's Encrypt and add them to your applications.

Show Suggested Answer

Suggested Answer: D

by Graciela at Jun 14, 2022, 04:49 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Developer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shayne

4 months ago

D sounds risky, managing SSL certs manually is a hassle!

upvoted 0 times

...

Jestine

4 months ago

Wait, can Istio really handle all that without major changes?

upvoted 0 times

...

Darci

4 months ago

C seems too complicated for quick fixes, not worth it.

upvoted 0 times

...

Caren

4 months ago

A won't really solve the encryption issue, just blocking traffic.

upvoted 0 times

...

Gary

4 months ago

Definitely go with B, Istio is the way to go for mTLS!

upvoted 0 times

...

Paulina

5 months ago

I vaguely recall that mTLS is a common solution for securing traffic in Kubernetes, so I think option B is likely the right choice.

upvoted 0 times

...

German

5 months ago

I feel like the option about SSL certificates could work, but it sounds more complicated than just using Istio for mTLS.

upvoted 0 times

...

Phil

5 months ago

I'm not entirely sure, but I think Network Policies might just block traffic instead of encrypting it.

upvoted 0 times

...

Winfred

5 months ago

I remember we discussed Istio in class, and it seems like enabling mTLS would be the best way to encrypt traffic without major changes.

upvoted 0 times

...

Elmer

5 months ago

This question seems straightforward. I think the number of substitutes available for the product is the key factor determining the elasticity of demand for a normal good.

upvoted 0 times

...

Precious

5 months ago

This seems like a straightforward definition question. I'll focus on understanding the key terms like "measurement error" and "true value" to determine the correct answer.

upvoted 0 times

...

Karan

5 months ago

Hmm, I'm not totally sure about this one. I think it might be WWPN, but I'm not 100% confident. I'll have to think it through carefully.

upvoted 0 times

...

Teresita

5 months ago

Hmm, I'm a bit unsure about this one. The question is asking about the purpose of something, but the options don't seem to directly match that. I'll have to think this through carefully.

upvoted 0 times

...

Candida

5 months ago

I remember discussing how specialization in scientific management can lead to employee boredom and decreased motivation. I think A is definitely a problem.

upvoted 0 times

...

Yvette

5 months ago

This is a tricky one. I'm not sure if a back door would be considered non-propagating, since it could potentially spread to other systems. I'll have to think this through carefully.

upvoted 0 times

...