PCD Deploying applications Practice Question
A team deploys a containerized web application on Google Kubernetes Engine (GKE) using a Deployment. They need to expose the application externally via a stable IP address and enable SSL termination. Which resource should they use?
⚠ Common exam trap
In the Google Cloud PCD exam, candidates often mistakenly believe a Service type LoadBalancer handles SSL termination. However, it provides only L4 load balancing with a stable IP. SSL termination requires an L7 Ingress with a Google-managed SSL certificate or a dedicated SSL proxy instance.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Ingress with Google-managed SSL certificate
An Ingress with a Google-managed SSL certificate is the correct choice because it provides a single stable IP address via a global forwarding rule, terminates SSL at the Google Cloud HTTP(S) load balancer, and routes traffic to the GKE Deployment. This approach offloads SSL decryption from the application pods and uses a managed certificate that auto-renews, meeting both the stable IP and SSL termination requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
HorizontalPodAutoscaler
Why it's wrong here
Scales pods, does not expose services.
- ✓
Ingress with Google-managed SSL certificate
Why this is correct
Provides SSL termination and a stable IP via the load balancer.
- ✗
Service type NodePort
Why it's wrong here
Exposes on each node's port, not suitable for external SSL termination.
- ✗
Service type LoadBalancer
Why it's wrong here
Provides external IP but does not terminate SSL.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PCD question from scratch — 964 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCD practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCD exam.