nerdexam
GoogleGoogle

ASSOCIATE-CLOUD-ENGINEER · Question #398

ASSOCIATE-CLOUD-ENGINEER Question #398: Real Exam Question with Answer & Explanation

Sign in or unlock ASSOCIATE-CLOUD-ENGINEER to reveal the answer and full explanation for question #398. The question stem and answer options stay visible for context.

Submitted by carlos_mx· Mar 30, 2026

Question

You are deploying an application to Google Kubernetes Engine (GKE) that needs to call an external third-party API. You need to provide the external API vendor with a list of IP addresses for their firewall to allow traffic from your application. You want to follow Google-recommended practices and avoid any risk of interrupting traffic to the API due to IP address changes. What should you do?

Options

  • AConfigure your GKE cluster with one node, and set the node to have a static external IP address.
  • BConfigure your GKE cluster with private nodes. Configure a Cloud NAT instance with static IP
  • CConfigure your GKE cluster with private nodes. Configure a Cloud NAT instance with dynamic IP
  • DConfigure your GKE cluster with public nodes. Write a Cloud Run function that pulls the public IP

Unlock ASSOCIATE-CLOUD-ENGINEER to see the answer

You've previewed enough free ASSOCIATE-CLOUD-ENGINEER questions. Unlock ASSOCIATE-CLOUD-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full ASSOCIATE-CLOUD-ENGINEER PracticeBrowse All ASSOCIATE-CLOUD-ENGINEER Questions