nerdexam
Google

PROFESSIONAL-CLOUD-ARCHITECT · Question #243

Your team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does not allow any Compu

Sign in or unlock PROFESSIONAL-CLOUD-ARCHITECT to reveal the answer and full explanation for question #243. The question stem and answer options stay visible for context.

Submitted by noor.lb· Mar 30, 2026Managing and provisioning cloud solution infrastructure

Question

Your team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet. Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines. What should you do?

Options

  • AConfigure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster
  • BConfigure the GKE cluster as a private cluster. Configure Private Google Access on the Virtual
  • CConfigure the GKE cluster as a route-based cluster. Configure Private Google Access on the
  • DCreate a Compute Engine instance, and install a NAT Proxy on the instance. Configure all

Unlock PROFESSIONAL-CLOUD-ARCHITECT to see the answer

You've previewed enough free PROFESSIONAL-CLOUD-ARCHITECT questions. Unlock PROFESSIONAL-CLOUD-ARCHITECT for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#GKE private cluster#Cloud NAT#private networking#outbound internet access
Full PROFESSIONAL-CLOUD-ARCHITECT Practice