
Answer-first summary for fast verification
Answer: Create one cluster for each environment (development and production) with each application in its own namespace within each cluster.
The question emphasizes the need to protect sensitive data from unauthorized access while minimizing management overhead. Option C is the correct choice because it provides a clear separation between development and production environments by using separate clusters for each, which is a best practice for security and isolation. Additionally, each application is placed in its own namespace within each cluster, further isolating applications from each other. This approach reduces the risk of unauthorized access between applications and environments, and while it may seem to increase management overhead initially, it actually simplifies management by clearly delineating environments and applications, making it easier to apply specific security policies and controls. Options A and D do not sufficiently isolate environments, which could lead to security risks. Option B, while isolating applications, does not separate environments, which could also lead to security risks and does not align with best practices for environment separation.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
Design a Google Kubernetes Engine (GKE) infrastructure for a company managing highly sensitive user data, with applications deployed in development and production environments. The design must prevent unauthorized access to data between applications while minimizing management overhead. What is the recommended approach?
A
Create one cluster for the organization with separate namespaces for each application and environment combination.
B
Create one cluster for each application with separate namespaces for production and development environments.
C
Create one cluster for each environment (development and production) with each application in its own namespace within each cluster.
D
Create one cluster for the organization with separate namespaces for each application.
No comments yet.