Google Cloud Professional Cloud Architect PCA — Topic 1 Question 150

Question

Your team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Configure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet. Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads. Cloud NAT lets private instances reach the internet for outbound traffic without external IPs.

Google Cloud Professional Cloud Architect PCA — Question 150