Google Exam Professional-Cloud-Architect Topic 3 Question 1 Discussion

Actual exam question for Google's Google Cloud Architect Professional exam

Question #: 1
Topic #: 3

[All Google Cloud Architect Professional Questions]

You team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines. What should you do?

ACreate a Compute Engine instance, and install a NAT Proxy on the instance. Configure all workloads on GKE to pass through this proxy to access third-party services on the Internet

BConfigure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet

CConfigure the GKE cluster as a route-based cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)

DConfigure the GKE cluster as a private cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)

Show Suggested Answer

Suggested Answer: B

A Cloud NAT gateway can perform NAT for nodes and Pods in a private cluster, which is a type of VPC-native cluster. The Cloud NAT gateway must be configured to apply to at least the following subnet IP address ranges for the subnet that your cluster uses:

Subnet primary IP address range (used by nodes)

Subnet secondary IP address range used for Pods in the cluster

Subnet secondary IP address range used for Services in the cluster

The simplest way to provide NAT for an entire private cluster is to configure a Cloud NAT gateway to apply to all of the cluster's subnet's IP address ranges.

https://cloud.google.com/nat/docs/overview

by Micaela at May 06, 2022, 07:46 AM

Limited Time Offer

25%

Off

Get Premium Professional-Cloud-Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!