nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #146

Your company has a single Virtual Private Cloud (VPC) network deployed in Google Cloud with on-premises connectivity already in place. You are deploying a new application using Google Kubernetes Engin

The correct answer is A. Create a GKE private cluster with a private endpoint for the control plane.. Configure your VPC network to export its custom routes in the peering relationship to the control plane's VPC network. The control plane's VPC network is already configured to import custom routes. This provides a path for the control plane to send packets back to on-premises res

Submitted by kevin_r· Apr 18, 2026Designing, planning, and prototyping a Google Cloud network

Question

Your company has a single Virtual Private Cloud (VPC) network deployed in Google Cloud with on-premises connectivity already in place. You are deploying a new application using Google Kubernetes Engine (GKE), which must be accessible only from the same VPC network and on- premises locations. You must ensure that the GKE control plane is exposed to a predefined list of on-premises subnets through private connectivity only. What should you do?

Options

  • ACreate a GKE private cluster with a private endpoint for the control plane.
  • BCreate a GKE private cluster with a public endpoint for the control plane.
  • CCreate a GKE private cluster with a private endpoint for the control plane.
  • DCreate a GKE public cluster.

How the community answered

(43 responses)
  • A
    84% (36)
  • B
    9% (4)
  • C
    5% (2)
  • D
    2% (1)

Explanation

Configure your VPC network to export its custom routes in the peering relationship to the control plane's VPC network. The control plane's VPC network is already configured to import custom routes. This provides a path for the control plane to send packets back to on-premises resources. https://cloud.google.com/kubernetes-engine/docs/how-to/private-clusters?hl=en#cp-on-prem-

Topics

#GKE private clusters#Control plane access#Hybrid connectivity#VPC networking

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice