You want to set up a Google Kubernetes Engine cluster. Verifiable node identity and integrity are required for the cluster, and nodes cannot be accessed from the internet. You want to reduce the opera

The correct answer is A. Deploy a private autopilot cluster.. In a private cluster, nodes only have internal IP addresses, which means that nodes and Pods are isolated from the internet by default. https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters Shielded GKE Nodes provide strong, verifiable node identity and integrit

Submitted by yuriko_h· Mar 30, 2026Deploying and implementing a cloud solution

Question

You want to set up a Google Kubernetes Engine cluster. Verifiable node identity and integrity are required for the cluster, and nodes cannot be accessed from the internet. You want to reduce the operational cost of managing your cluster, and you want to follow Google-recommended practices. What should you do?

Options

ADeploy a private autopilot cluster.
BDeploy a public autopilot cluster.
CDeploy a standard public cluster and enable shielded nodes.
DDeploy a standard private cluster and enable shielded nodes.

How the community answered

(40 responses)

A
73% (29)
B
5% (2)
C
15% (6)
D
8% (3)

Explanation

In a private cluster, nodes only have internal IP addresses, which means that nodes and Pods are isolated from the internet by default. https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters Shielded GKE Nodes provide strong, verifiable node identity and integrity to increase the security of Google Kubernetes Engine (GKE) nodes. Note: For GKE Autopilot clusters, the Shielded GKE Nodes feature is enabled by default and cannot be overridden. https://cloud.google.com/kubernetes-engine/docs/how-to/shielded-gke-nodes

Topics

#GKE Autopilot#private cluster#shielded nodes#node integrity

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice