nerdexam
Google

PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #28

You create a Google Kubernetes Engine private cluster and want to use kubectl to get the status of the pods. In one of your instances you notice the master is not responding, even though the cluster…

The correct answer is D. Create the appropriate master authorized network entries to allow the instance to communicate to. Private clusters run nodes that only have internal IP addresses, and do not allow public IPs over the internet to access the control plane endpoint. Additionally, private clusters do not allow Google Cloud IP addresses to access the control plane endpoint by default. Using…

Submitted by rachelw· Apr 18, 2026Implementing network security

Question

You create a Google Kubernetes Engine private cluster and want to use kubectl to get the status of the pods. In one of your instances you notice the master is not responding, even though the cluster is up and running. What should you do to solve the problem?

Options

  • AAssign a public IP address to the instance.
  • BCreate a route to reach the Master, pointing to the default internet gateway.
  • CCreate the appropriate firewall policy in the VPC to allow traffic from Master node IP address to
  • DCreate the appropriate master authorized network entries to allow the instance to communicate to

How the community answered

(63 responses)
  • A
    6% (4)
  • B
    16% (10)
  • C
    5% (3)
  • D
    73% (46)

Explanation

Private clusters run nodes that only have internal IP addresses, and do not allow public IPs over the internet to access the control plane endpoint. Additionally, private clusters do not allow Google Cloud IP addresses to access the control plane endpoint by default. Using authorized networks in private clusters makes your control plane reachable only by allowed CIDRs, by nodes and Pods within your cluster's VPC, and by Google's internal production jobs that manage your https://cloud.google.com/kubernetes-engine/docs/how-to/authorized-networks

Topics

#GKE Private Clusters#Master Authorized Networks#kubectl connectivity#Network Access Control

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-NETWORK-ENGINEER Practice