Google Professional Cloud Network Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
To configure access to the remote address range 35.100.0.0/16 through Cloud NAT instead of using the external IP addresses of your VPC-native GKE Standard cluster nodes (with SNAT enabled), what steps should you take?
Note: Ensure the cluster's SNAT configuration aligns with Cloud NAT requirements.
A
Configure nonMasqueradeCIDRs in the ip-masq-agent ConfigMap. Include the 35.100.0.0/16 range in the list.
B
Configure nonMasqueradeCIDRs in the ip-masq-agent ConfigMap. Remove the 35.100.0.0/16 range from the list.
C
Configure Cloud NAT and create an exclusion rule for any SNAT address translation.
D
Configure Cloud NAT with nonMasqueradeCIDRs, and enable SNAT with the same configuration to allow traffic to 35.100.0.0/16.