Courseiva
Configuring Network ServiceshardMultiple ChoiceObjective-mapped

PCNE Configuring Network Services Practice Question

An application running on Google Kubernetes Engine (GKE) uses Traffic Director for traffic management with Envoy sidecars. You want to implement fault injection to test resilience by injecting a 50% failure rate on a subset of traffic. Which Traffic Director configuration should you use?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Configure a route rule with a fault injection policy specifying a percentage and abort/fixed delay.

Traffic Director uses Envoy's fault injection filter, configured via the Envoy xDS API or through GKE configuration. The correct approach is to apply a traffic policy with fault injection percentage. The other options are not valid Traffic Director features or do not achieve fault injection.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Use the gcloud compute backend-services update command with the --fault-injection flag.

    Why it's wrong here

    Fault injection is not configured at the backend service level in gcloud; it's a Traffic Director Envoy route rule.

  • Set a circuit breaker with a max pending requests threshold.

    Why it's wrong here

    Circuit breakers prevent cascading failures, but do not inject faults.

  • Configure a route rule with a fault injection policy specifying a percentage and abort/fixed delay.

    Why this is correct

    Fault injection is configured in the route rule (via Envoy's fault filter) in Traffic Director.

  • Create a backend service with connection draining and set the drain timeout.

    Why it's wrong here

    Connection draining is for graceful shutdown, not fault injection.

Visual reference

Source Router + ACL permit 10.0.0.0/8 deny any Server 10.0.0.5 ✓ 192.168.1.1 ✗ dropped ACLs evaluate top-down; first match wins — implicit deny all at end

About these practice questions

This PCNE question is part of Courseiva's 961-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PCNE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCNE exam.