A security policy requires that the Kubernetes API server be reachable only from within a private network. Which control plane endpoint configuration should be used?

Both public and private endpoints

You have a GKE cluster with a default node pool. You need to add a new node pool with a different machine type (e.g., for GPU workloads) and ensure that the new nodes are placed in a specific subnet within the same VPC. What should you do?

Create a new cluster in the same VPC with the desired subnet and machine type.

Create a new node pool and specify the subnet and machine type in the node pool configuration.

Modify the existing node pool to change the machine type and subnet.

Use the 'gcloud container clusters update' command to add a new node pool.

When planning pod and service IP ranges for a GKE cluster, what is a key consideration?

Using the smallest possible ranges to save IP addresses

Using the same range for pods and services

Always using RFC 1918 addresses

Ensuring the ranges do not overlap with other networks in the VPC

Why might a network engineer choose a non-RFC 1918 address range for GKE pods?

To avoid overlap with existing on-premises RFC 1918 ranges

To comply with Google's requirement for non-RFC 1918

To reduce the number of IP addresses needed

To enable direct internet access for pods

What is a dual-stack GKE cluster?

A cluster that uses both public and private nodes

A cluster that supports both IPv4 and IPv6 addresses

A cluster with two control plane endpoints

Google CloudProfessional Cloud Network Engineer

Domain 1Objective 4

1.4 Designing for Google Kubernetes Engine (GKE). Considerations Include: PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice Questions (Page 1)

Part of the Section 1: Designing and planning a Google Cloud VPC network (~21% of the exam) domain, which accounts for ~21% of the PROFESSIONAL-CLOUD-NETWORK-ENGINEER exam.

18questions here

4free pages

9concepts

~21%of the exam

Questions 1–5

1foundation · easy
A security policy requires that the Kubernetes API server be reachable only from within a private network. Which control plane endpoint configuration should be used?
Select an answer first
2application · medium
You have a GKE cluster with a default node pool. You need to add a new node pool with a different machine type (e.g., for GPU workloads) and ensure that the new nodes are placed in a specific subnet within the same VPC. What should you do?
Select an answer first
3foundation · easy
When planning pod and service IP ranges for a GKE cluster, what is a key consideration?
Select an answer first
4foundation · easy
Why might a network engineer choose a non-RFC 1918 address range for GKE pods?
Select an answer first
5foundation · easy
What is a dual-stack GKE cluster?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PROFESSIONAL-CLOUD-NETWORK-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-NETWORK-ENGINEER” is a trademark of its owner, used for identification only.