Exam Professional Cloud Developer topic 1 question 328 discussion

Actual exam question from Google's Professional Cloud Developer

Question #: 328
Topic #: 1

[All Professional Cloud Developer Questions]

Your team has created an application that is hosted on a GKE cluster. You need to connect the application to a REST service that is deployed in two GKE clusters in two different regions. How should you set up the connection and health checks? (Choose two.)

A. Use Cloud Service Mesh with sidecar proxies to connect the application to the REST service.
B. Use Cloud Service Mesh with proxyless gRPC to connect the application to the REST service.
C. Configure the REST service's firewall to allow health checks originating from the GKE service’s IP ranges.
D. Configure the REST service's firewall to allow health checks originating from the GKE control plane’s IP ranges.
E. Configure the REST service's firewall to allow health checks originating from the GKE check probe’s IP ranges.

Show Suggested Answer

Suggested Answer: AE 🗳️

by Sandesh24 at March 1, 2025, 7:36 a.m.

Comments

Submit Cancel

Pime13

3 weeks, 6 days ago

Selected Answer: AE

AE A. Use Cloud Service Mesh with sidecar proxies to connect the application to the REST service. Configure the REST service’s firewall to allow health checks originating from the GKE check probe’s IP ranges.

upvoted 1 times

...

Sandesh24

5 months, 2 weeks ago

Selected Answer: AE

• A. Use Cloud Service Mesh with sidecar proxies to connect the application to the REST service. Cloud Service Mesh (typically implemented with Istio on GKE) with sidecar proxies is the recommended approach for secure, multi-cluster service connectivity. The sidecar pattern provides features like load balancing, mutual TLS, and traffic management which are essential for connecting services across regions. • E. Configure the REST service’s firewall to allow health checks originating from the GKE check probe’s IP ranges. For proper health monitoring, the firewall rules must permit traffic from the known IP ranges used by the Kubernetes health check probes. This ensures that the health checks for the REST service succeed without exposing the service to unintended traffic.

upvoted 2 times

...