2.4 Configuring and Maintaining GKE Clusters. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · medium

   A network engineer is creating a private GKE cluster. They want the cluster's control plane to have only a private IP address, with no public endpoint. Which statement correctly describes the implications of this configuration for accessing the cluster's API server?

   • AThe API server is reachable from the public internet, but only from within the same region as the cluster.
   • BThe API server is reachable from the public internet, but only from IP addresses listed in the authorized networks.
   • CNodes and administrators must use a NAT gateway to reach the API server because the private endpoint is not routable within the VPC.
   • DNodes can reach the API server through the private endpoint, but external administrators must use a VPN or Cloud Interconnect to reach it.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   Your GKE cluster has a high volume of DNS queries from Pods, causing latency and load on the kube-dns service. You want to reduce DNS latency and offload queries from the central DNS service. What should you configure?

   • AUse a custom DNS server for the cluster.
   • BIncrease the number of kube-dns replicas.
   • CConfigure Cloud DNS as the cluster's DNS provider.
   • DEnable NodeLocal DNSCache on the cluster.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is planning a new GKE cluster. They require support for Kubernetes Network Policies and need to ensure that Pod IPs are routable within the VPC. They also want to use a Shared VPC. Which cluster configuration should they choose?

   • AVPC-native cluster without Dataplane V2, using a Shared VPC subnet.
   • BRoutes-based cluster with Dataplane V2 enabled, using a Shared VPC subnet.
   • CRoutes-based cluster with Calico network policies, using a Shared VPC subnet.
   • DVPC-native cluster with Dataplane V2 enabled, using a Shared VPC subnet.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   When adding an authorized network to a GKE cluster, what format is used to specify the allowed IP range?

   • AA wildcard pattern, e.g., 192.168.*.*
   • BA single IP address with a subnet mask, e.g., 192.168.1.0/24
   • CA hostname, e.g., myhost.example.com
   • DA range of IP addresses, e.g., 192.168.1.1-192.168.1.254
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is required for Kubernetes Network Policies to work in GKE?

   • AThe cluster must be private
   • BThe cluster must be VPC-native
   • CThe cluster must use a Shared VPC
   • DThe cluster must have network policy enforcement enabled
   Reveal Solution Discussion Select an answer first