To improve the security of a multi-tenant GKE cluster, an architect wants to ensure that pods from one tenant cannot reach pods from another tenant unless explicitly allowed. Which native Kubernetes resource is used to enforce this isolation?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: NetworkPolicy

NetworkPolicies control traffic flow between pods even within the same cluster, providing L3/L4 isolation at the Kubernetes layer....

๐Ÿ“‹Part of Professional Cloud Architect ยท GCP Certification Practice
Real Exam ScenarioGoogle Kubernetes Engine (GKE)

To improve the security of a multi-tenant GKE cluster, an architect wants to ensure that pods from one tenant cannot reach pods from another tenant unless explicitly allowed. Which native Kubernetes resource is used to enforce this isolation?

โœ“ Correct Answer & ExplanationGoogle Kubernetes Engine (GKE)

Correct Answer

NetworkPolicy

Why This Answer Is Correct

NetworkPolicies control traffic flow between pods even within the same cluster, providing L3/L4 isolation at the Kubernetes layer.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Google Kubernetes Engine (GKE) โ€” a core concept tested in Professional Cloud Architect. Understanding Google Kubernetes Engine (GKE) is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.