3.1 Configuring Load Balancing. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   Your team runs a stateful application on Google Kubernetes Engine (GKE) with a StatefulSet. The application requires that each pod receives traffic from a specific client consistently. You need to expose the application to the internet using a load balancer that supports session affinity. What should you use?

   • ACreate a NetworkPolicy that allows traffic only from specific client IPs
   • BCreate a Gateway resource with an HTTPRoute and configure session affinity on the HTTPRoute
   • CCreate a Service of type LoadBalancer with session affinity set to ClientIP
   • DCreate an Ingress resource with the GKE Ingress controller and configure session affinity on the backend service
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   Your company runs a TCP-based application on Compute Engine VMs in two regions: us-central1 and europe-west1. The application requires low-latency and must be accessible from the internet. You need to load balance TCP traffic across both regions. Which load balancing solution should you use?

   • AInternal Network Load Balancer in each region with a global internal IP address
   • BExternal Application Load Balancer with a global external IP address
   • CExternal TCP Proxy Load Balancer with a global external IP address
   • DExternal Network Load Balancer in each region with a global external IP address
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   Your company runs a global e-commerce platform with users across North America and Europe. The application is deployed as containers on Google Kubernetes Engine (GKE) in multiple regional clusters. You need to expose the application to the internet with a single anycast IP address and the ability to route traffic to the nearest healthy backend. Which load balancing solution should you use?

   • AInternal Application Load Balancer with a global internal IP address
   • BExternal Network Load Balancer with a regional external IP address
   • CExternal SSL Proxy Load Balancer with a regional external IP address
   • DExternal Application Load Balancer with a global external IP address
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   Your company runs a global web application on Compute Engine VMs in multiple regions. You are using an external Application Load Balancer with a global external IP address. You need to ensure that traffic from a specific set of client IP addresses is blocked. You also need to allow traffic from a specific set of IP addresses to a separate backend service. What should you configure?

   • AConfigure a traffic splitting policy that sends traffic from specific IP addresses to a different backend service
   • BConfigure a URL map with host rules that route traffic from specific IP addresses to different backend services
   • CConfigure firewall rules in the VPC network to block traffic from the client IP addresses
   • DConfigure Cloud Armor policies on the backend services to allow and deny traffic based on client IP addresses
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   Your organization runs a microservices application on Google Kubernetes Engine (GKE) with multiple services. You need to expose these services to the internet using a single load balancer that supports path-based routing and TLS termination. You also want to use the GKE Gateway controller to manage the load balancer configuration. What should you use?

   • ACreate an Ingress resource with an IngressClass that points to the GKE Ingress controller
   • BCreate a Gateway resource with an HTTPRoute that defines path-based routing to the services
   • CCreate a Service of type LoadBalancer with an external IP and configure path-based routing using annotations
   • DCreate a NetworkPolicy that routes traffic to the services based on the path
   Reveal Solution Discussion Select an answer first