Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Architect (PR000213) Exam - Topic 3 Question 1 Discussion

You team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines. What should you do?
B) Configure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet
A) Create a Compute Engine instance, and install a NAT Proxy on the instance. Configure all workloads on GKE to pass through this proxy to access third-party services on the Internet
C) Configure the GKE cluster as a route-based cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)
D) Configure the GKE cluster as a private cluster. Configure Private Google Access on the Virtual Private Cloud (VPC)

Google Professional Cloud Architect (PR000213) Exam - Topic 3 Question 1 Discussion

Actual exam question for Google's Professional Cloud Architect (PR000213) exam
Question #: 1
Topic #: 3
[All Professional Cloud Architect (PR000213) Questions]

You team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: B

A Cloud NAT gateway can perform NAT for nodes and Pods in a private cluster, which is a type of VPC-native cluster. The Cloud NAT gateway must be configured to apply to at least the following subnet IP address ranges for the subnet that your cluster uses:

Subnet primary IP address range (used by nodes)

Subnet secondary IP address range used for Pods in the cluster

Subnet secondary IP address range used for Services in the cluster

The simplest way to provide NAT for an entire private cluster is to configure a Cloud NAT gateway to apply to all of the cluster's subnet's IP address ranges.

https://cloud.google.com/nat/docs/overview


by Micaela at May 06, 2022, 07:46 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect (PR000213) Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Olive
10 months ago
Really? I thought we needed a public IP for internet access!
upvoted 0 times
...
Marjory
10 months ago
I think D is better for accessing Google services directly.
upvoted 0 times
...
Glory
11 months ago
Wait, what’s the difference between B and D?
upvoted 0 times
...
Rory
11 months ago
I agree, B makes the most sense for security.
upvoted 0 times
...
Gaynell
11 months ago
Option B is the best choice for private access!
upvoted 0 times
...
Annice
11 months ago
I have a vague memory of Private Google Access being important for accessing Google services without public IPs, so maybe option D is the right choice?
upvoted 0 times
...
Nieves
11 months ago
I remember practicing a question similar to this where we had to ensure no public IPs were used. I feel like option A might not be compliant with that requirement.
upvoted 0 times
...
Nieves
11 months ago
I'm not entirely sure about the differences between options B and D. They both mention private clusters, but I can't recall the specifics of Private Google Access.
upvoted 0 times
...
Jennie
11 months ago
I think option B sounds familiar because it mentions a private cluster and Cloud NAT, which we discussed in our last session.
upvoted 0 times
...
Crista
11 months ago
Based on my understanding of Salesforce CPQ, the correct answer is A. The sales users will need full CRUD permissions on the Quote, Quote Line, Quote Line Group, and Quote Document objects.
upvoted 0 times
...
Corrinne
11 months ago
I'm torn between A and D. I know discovery rules are important for understanding our assets, but I also think we need a solid approach to handle NetFlow traffic.
upvoted 0 times
...
Kayleigh
11 months ago
I'm leaning towards IPsec because I remember it being a widely used method for encrypting traffic, but does it maintain line-rate throughput?
upvoted 0 times
...
Caprice
11 months ago
Hmm, I'm a bit unsure about this one. The options all seem to cover typical audit committee duties, so I'll need to carefully read through each one to figure out which one is the odd one out.
upvoted 0 times
...

Save Cancel