Question 146 of 315
Single answerYour team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet.
Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines. What should you do?
✓AConfigure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet.
BConfigure the GKE cluster as a private cluster. Configure Private Google Access on the Virtual Private Cloud (VPC).
CConfigure the GKE cluster as a route-based cluster. Configure Private Google Access on the Virtual Private Cloud (VPC).
DCreate a Compute Engine instance, and install a NAT Proxy on the instance. Configure all workloads on GKE to pass through this proxy to access third-party services on the Internet.
✓
Correct Answer: A
Configure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.