Google Cloud Associate Cloud Engineer ACE — Topic 1 Question 310

Question

You are deploying an application to Google Kubernetes Engine (GKE) that needs to call an external third-party API. You need to provide the external API vendor with a list of IP addresses for their firewall to allow traffic from your application. You want to follow Google-recommended practices and avoid any risk of interrupting traffic to the API due to IP address changes. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Configure your GKE cluster with private nodes. Configure a Cloud NAT instance with static IP addresses. Provide these IP addresses to the vendor to be added to the allowlist. Google Kubernetes Engine runs managed Kubernetes for containerized, portable workloads. Cloud NAT lets private instances reach the internet for outbound traffic without external IPs.

Google Cloud Associate Cloud Engineer ACE — Question 310