Google Professional Cloud DevOps Engineer Exam - Topic 4 Question 30 Discussion

Actual exam question for Google's Professional Cloud DevOps Engineer exam

Question #: 30
Topic #: 4

[All Professional Cloud DevOps Engineer Questions]

Your company is developing applications that are deployed on Google Kubernetes Engine (GKE). Each team manages a different application. You need to create the development and production environments for each team, while minimizing costs. Different teams should not be able to access other teams' environments. What should you do?

ACreate one GCP Project per team. In each project, create a cluster for Development and one for Production. Grant the teams IAM access to their respective clusters.

BCreate one GCP Project per team. In each project, create a cluster with a Kubernetes namespace for Development and one for Production. Grant the teams IAM access to their respective clusters.

CCreate a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Identity Aware Proxy so that each team can only access its own namespace.

DCreate a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Kubernetes Role-based access control (RBAC) so that each team can only access its own namespace.

Show Suggested Answer

Suggested Answer: D

by Daniel at May 09, 2022, 05:29 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud DevOps Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cristina

4 months ago

I disagree, A might lead to more complexity in managing multiple projects.

upvoted 0 times

...

Rozella

4 months ago

D is definitely the way to go with RBAC for security.

upvoted 0 times

...

Johnson

4 months ago

Surprised that C suggests using Identity Aware Proxy! Isn't that overkill?

upvoted 0 times

...

Lynsey

4 months ago

I think B is better for isolation, though.

upvoted 0 times

...

Alpha

5 months ago

Option A sounds straightforward and keeps costs low.

upvoted 0 times

...

Elouise

5 months ago

I vaguely remember that using separate clusters can lead to higher costs, so I’m leaning towards option A or B, but I’m not entirely confident about the implications of IAM access.

upvoted 0 times

...

Junita

5 months ago

I feel like using RBAC in option D could be a solid choice for managing access, but I wonder if it complicates things too much for the teams.

upvoted 0 times

...

Joni

5 months ago

I think option B sounds familiar. We practiced something similar where we used namespaces within a single project, but I can't recall if that really meets the access control requirement.

upvoted 0 times

...

Stephaine

5 months ago

I remember we discussed using separate GCP projects for each team to keep things isolated, but I'm not sure if that's the best way to minimize costs.

upvoted 0 times

...

Dorothy

5 months ago

This looks like a straightforward question about the SYSOPER privilege. I'll start by carefully reading through the options and thinking about which ones align with the SYSOPER privileges.

upvoted 0 times

...

Dyan

5 months ago

This question seems straightforward, but I want to make sure I understand the key concepts around custom products in ServiceNow before selecting an answer.

upvoted 0 times

...

Margart

5 months ago

I'm a bit confused by this question. The wording is a bit tricky, and I'm not sure if "white box testing" necessarily means no automated testing software is used. I'll have to think this through carefully.

upvoted 0 times

...