Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud DevOps Engineer Exam - Topic 4 Question 30 Discussion

Your company is developing applications that are deployed on Google Kubernetes Engine (GKE). Each team manages a different application. You need to create the development and production environments for each team, while minimizing costs. Different teams should not be able to access other teams' environments. What should you do?
D) Create a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Kubernetes Role-based access control (RBAC) so that each team can only access its own namespace.
A) Create one GCP Project per team. In each project, create a cluster for Development and one for Production. Grant the teams IAM access to their respective clusters.
B) Create one GCP Project per team. In each project, create a cluster with a Kubernetes namespace for Development and one for Production. Grant the teams IAM access to their respective clusters.
C) Create a Development and a Production GKE cluster in separate projects. In each cluster, create a Kubernetes namespace per team, and then configure Identity Aware Proxy so that each team can only access its own namespace.

Google Professional Cloud DevOps Engineer Exam - Topic 4 Question 30 Discussion

Actual exam question for Google's Professional Cloud DevOps Engineer exam
Question #: 30
Topic #: 4
[All Professional Cloud DevOps Engineer Questions]

Your company is developing applications that are deployed on Google Kubernetes Engine (GKE). Each team manages a different application. You need to create the development and production environments for each team, while minimizing costs. Different teams should not be able to access other teams' environments. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Daniel at May 09, 2022, 05:29 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud DevOps Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Cristina
9 months ago
I disagree, A might lead to more complexity in managing multiple projects.
upvoted 0 times
...
Rozella
9 months ago
D is definitely the way to go with RBAC for security.
upvoted 0 times
...
Johnson
9 months ago
Surprised that C suggests using Identity Aware Proxy! Isn't that overkill?
upvoted 0 times
...
Lynsey
9 months ago
I think B is better for isolation, though.
upvoted 0 times
...
Alpha
9 months ago
Option A sounds straightforward and keeps costs low.
upvoted 0 times
...
Elouise
10 months ago
I vaguely remember that using separate clusters can lead to higher costs, so I’m leaning towards option A or B, but I’m not entirely confident about the implications of IAM access.
upvoted 0 times
...
Junita
10 months ago
I feel like using RBAC in option D could be a solid choice for managing access, but I wonder if it complicates things too much for the teams.
upvoted 0 times
...
Joni
10 months ago
I think option B sounds familiar. We practiced something similar where we used namespaces within a single project, but I can't recall if that really meets the access control requirement.
upvoted 0 times
...
Stephaine
10 months ago
I remember we discussed using separate GCP projects for each team to keep things isolated, but I'm not sure if that's the best way to minimize costs.
upvoted 0 times
...
Dorothy
10 months ago
This looks like a straightforward question about the SYSOPER privilege. I'll start by carefully reading through the options and thinking about which ones align with the SYSOPER privileges.
upvoted 0 times
...
Dyan
10 months ago
This question seems straightforward, but I want to make sure I understand the key concepts around custom products in ServiceNow before selecting an answer.
upvoted 0 times
...
Margart
10 months ago
I'm a bit confused by this question. The wording is a bit tricky, and I'm not sure if "white box testing" necessarily means no automated testing software is used. I'll have to think this through carefully.
upvoted 0 times
...

Save Cancel