New Study Deck 2

Question 1

What is a network endpoint group (NEG)?

Answer 1

Network endpoint groups (NEGs) are zonal resources that represent collections of IP address and port combinations for GCP resources within a single subnet. Each IP address and port combination is called a network endpoint.

Question 2

What is a Secondary subnet range?

Answer 2

Secondary range you can apply to a subnet for use with alias IP ranges

Question 3

Why would you use tags over service accounts for firewall rules?

Answer 3

Don’t need to restart VM to change, can have multiple tags on a VM

Question 4

Why would you use service accounts over network tags for firewall rules?

Answer 4

Anyone can set any tag! Service accounts are resources with permissions.

Question 5

What are the IP address ranges you need to assign when you build a GKE cluster?

Answer 5

“Node subnet
Services secondary range
Pods secondary range
Master IP range (for private clusters)”

Question 6

What is an Ingress controller?

Answer 6

It is a GKE service that creates and manages an HTTP(s) load balancer on GCP. The backend can be a NEG.