When planning IP address space for a GKE cluster, what must be considered to avoid IP exhaustion?

The number of nodes and the number of Pods per node.

The size of the container images.

A company is planning to deploy 500 new GKE nodes across three regions. Each node will require a /28 alias IP range for pods. The network team is concerned about hitting the default VPC quota for 'Alias IP ranges per VPC network'. They want to avoid a production outage during the rollout. What should they do first?

Deploy the nodes and monitor the quota; if it is exceeded, the deployment will pause automatically.

Create a new VPC network for each region to distribute the quota usage.

Use a larger secondary range for pods to reduce the number of alias IP ranges.

Request a quota increase for 'Alias IP ranges per VPC network' before starting the deployment.

A company uses a Shared VPC in a central networking project. The application team needs to create their own external HTTPS load balancers in their service project. The network team wants to grant the minimum permissions necessary for this task without giving access to modify the Shared VPC subnets. What IAM role should they grant to the application team?

Compute Load Balancer Admin (roles/compute.loadBalancerAdmin)

Compute Network Admin (roles/compute.networkAdmin)

Compute Security Admin (roles/compute.securityAdmin)

Compute Viewer (roles/compute.viewer)

Why are secondary IP ranges used in GKE clusters?

To provide IP addresses for Pods and Services separately from the primary range.

To provide a backup IP range for failover.

To increase the number of nodes in the cluster.

Google CloudProfessional Cloud Network Engineer

Domain 1Objective 1

1.1 Designing an Overall Network Architecture. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 4)

Part of the Section 1: Designing and planning a Google Cloud VPC network (~21% of the exam) domain, which accounts for ~21% of the PROFESSIONAL-CLOUD-NETWORK-ENGINEER exam.

49questions here

10free pages

22concepts

~21%of the exam

22 Concepts in This Objective

Network Tiers Overview
Selecting Network Tiers
High Availability Design
Failover Strategies
Disaster Recovery Planning
Scaling Network Architecture
DNS Topology Design
Cloud DNS Configuration
On-Premises DNS Integration
Load Balancer Types
Load Balancer Selection Criteria
GKE Networking Fundamentals
Secondary Ranges for GKE
GKE Scale and IP Address Planning
GKE Control Plane Access
IAM Roles for Network Architecture
Shared VPC Subnet Permissions
Private Services Access
Private Service Connect (PSC)
Serverless VPC Access
Quotas and Limits Planning
Monitoring and Adjusting Quotas

Questions 16–20

16foundation · easy
When planning IP address space for a GKE cluster, what must be considered to avoid IP exhaustion?
Select an answer first
17foundation · easy
A company needs to load balance HTTPS traffic globally with SSL termination. Which load balancer should they choose?
Select an answer first
18expert · hard
A company is planning to deploy 500 new GKE nodes across three regions. Each node will require a /28 alias IP range for pods. The network team is concerned about hitting the default VPC quota for 'Alias IP ranges per VPC network'. They want to avoid a production outage during the rollout. What should they do first?
Select an answer first
19application · medium
A company uses a Shared VPC in a central networking project. The application team needs to create their own external HTTPS load balancers in their service project. The network team wants to grant the minimum permissions necessary for this task without giving access to modify the Shared VPC subnets. What IAM role should they grant to the application team?
Select an answer first
20foundation · easy
Why are secondary IP ranges used in GKE clusters?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-NETWORK-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-NETWORK-ENGINEER” is a trademark of its owner, used for identification only.

1.1 Designing an Overall Network Architecture. Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 4)

Questions 16–20

When planning IP address space for a GKE cluster, what must be considered to avoid IP exhaustion?

A company needs to load balance HTTPS traffic globally with SSL termination. Which load balancer should they choose?

Why are secondary IP ranges used in GKE clusters?

Keep studying — Section 1: Designing and planning a Google Cloud VPC network (~21% of the exam)