PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #109
PROFESSIONAL-CLOUD-NETWORK-ENGINEER Question #109: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER to reveal the answer and full explanation for question #109. The question stem and answer options stay visible for context.
Question
You deployed a hub-and-spoke architecture in your Google Cloud environment that uses VPC Network Peering to connect the spokes to the hub. For security reasons, you deployed a private Google Kubernetes Engine (GKE) cluster in one of the spoke projects with a private endpoint for the control plane. You configured authorized networks to be the subnet range where the GKE nodes are deployed. When you attempt to reach the GKE control plane from a different spoke project, you cannot access it. You need to allow access to the GKE control plane from the other spoke projects. What should you do?
Options
- AAdd a firewall rule that allows port 443 from the other spoke projects.
- BEnable Private Google Access on the subnet where the GKE nodes are deployed.
- CConfigure the authorized networks to be the subnet ranges of the other spoke projects.
- DDeploy a proxy in the spoke project where the GKE nodes are deployed and connect to the
Unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-NETWORK-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-NETWORK-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.