Correct Answer: Multi-cluster Ingress (MCI) with a Global HTTP(S) Load Balancer
Multi-cluster Ingress (MCI) uses the Global Google Cloud Load Balancer to provide a single VIP that cross-regionally distributes traffic to GKE clusters, automatically handling reg...
Correct Answer
Multi-cluster Ingress (MCI) with a Global HTTP(S) Load Balancer
Why This Answer Is Correct
Multi-cluster Ingress (MCI) uses the Global Google Cloud Load Balancer to provide a single VIP that cross-regionally distributes traffic to GKE clusters, automatically handling regional failover and latency-based routing.
This question evaluates your knowledge of Google Kubernetes Engine (GKE) — a core concept tested in Professional Cloud Architect. Understanding Google Kubernetes Engine (GKE) is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Your company is running a stateful application on GKE. You need to ensure that when a pod is rescheduled to a different node, it can still access its persistent data. What must you use?
To prevent unauthorized lateral movement in a GKE cluster if a pod is compromised, what security feature should you implement?
Scenario: To secure a GKE cluster for a HIPAA-compliant workload, an architect wants to ensure that all administrative actions (e.g., creating a deployment) are logged. Which tool is essential?
How can you securely store and retrieve secrets in GKE without hardcoding them in your application code or Dockerfile?
To improve the security of a GKE cluster, an architect wants to ensure that all pods are forbidden from running as the 'root' user and that they cannot access the host's filesystem. Which Kubernetes resource handles these security constraints?