Some GKE-hosted apps send in-cluster traffic in clear text. To encrypt all application traffic quickly with minimal app changes and maintain Google support, what should you do?
Choose an answer
Tap an option to check your answer.
Correct answer: Install Istio, enable proxy injection on your application namespace, and then enable mTLS..
Why this is the answer
Installing Istio, a service mesh, allows you to enable mutual TLS (mTLS) encryption for in-cluster traffic without modifying application code. Istio's sidecar proxies intercept and encrypt/decrypt traffic between services, providing transparent encryption. This approach is quick, minimizes application changes, and is supported by Google. Network Policies control traffic flow but don't encrypt it. Defining trusted network ranges or using Let's Encrypt for SSL certificates requires application-level changes and doesn't provide automatic in-cluster mTLS for all traffic.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed