Cheat sheet & self-check

Pick an answer to see if you got it, and why.

1. Q1. A cluster's Pod range is a /19 with 110 max Pods per node. How many nodes fit?

   1. A8192
   2. B32
   3. C110
   4. D64
   Show answer

   B. 110 Pods per node takes a /24 per node; a /19 holds 32 /24 blocks.

   From lesson 17 · Q&A: platform design, networking & identity

2. Q2. Which combination gives teams namespace-only access in GKE?

   1. Aroles/container.developer on the project
   2. BA light IAM role to get credentials (cluster viewer) plus RBAC RoleBindings for the team's group in its namespaces
   3. COwner on the project
   4. DNo IAM at all
   Show answer

   B. IAM GKE roles are project-wide; RBAC adds namespace scope.

   From lesson 17 · Q&A: platform design, networking & identity

3. Q3. Which node pool upgrade strategy allows a rollback during a soak period?

   1. ASurge
   2. BBlue-green
   3. CManual delete
   4. DZonal
   Show answer

   B. Blue-green keeps the old nodes until the soak ends, so you can roll back to them.

   From lesson 18 · Q&A: operations, storage, security & cost

4. Q4. What usually drives an unexpectedly large Cloud Logging bill?

   1. ANumber of clusters
   2. BLog ingestion volume from noisy workloads and verbose levels, without exclusions or routing
   3. CDashboards
   4. DAlert policies
   Show answer

   B. Ingestion is billed by volume; reduce it at the source and with exclusion filters.

   From lesson 18 · Q&A: operations, storage, security & cost