Google Professional Cloud Architect
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
Your team has developed a new application that needs to run on a Google Kubernetes Engine (GKE) cluster. This application requires access to third-party services on the internet. However, your company's security policy mandates that no Compute Engine instances should have a public IP address on Google Cloud. Given these restrictions, what is the appropriate deployment strategy for your GKE cluster?
A
Configure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet.
B
Configure the GKE cluster as a private cluster. Configure Private Google Access on the Virtual Private Cloud (VPC).
C
Configure the GKE cluster as a route-based cluster. Configure Private Google Access on the Virtual Private Cloud (VPC).
D
Create a Compute Engine instance, and install a NAT Proxy on the instance. Configure all workloads on GKE to pass through this proxy to access third-party services on the Internet.