PROFESSIONAL-CLOUD-NETWORK-ENGINEER practice

Q1 Single choice

You are designing the networking for a Google Kubernetes Engine (GKE) cluster that will host an internal, employee-facing application. This application needs to be accessible from your on-premises corporate network and from specific internal VPC networks in Google Cloud. You need to design a highly available and scalable load balancing solution for ingress traffic with a cookie-based session affinity without exposing the application to the public internet.

What should you do?

A
Use a GKE Gateway controller with an internal HTTPS load balancer. Configure DNS records to point to the load balancer's internal IP address from your on-premises network and peered internal VPCs.
B
Implement a GKE Service of type LoadBalancer to provision an internal TCP/UDP load balancer.
Configure its forwarding rule to accept traffic from your internal VPC and on-premises IP ranges.
C
Expose the application using a Service of type NodePort, and configure an on-premises load balancer to target all the GKE node IPs as its backend.
D
Implement a GKE Service of type LoadBalancer to provision a regional TCP proxy load balancer. Apply firewall rules to restrict traffic to your internal source IP ranges.