Google Professional Cloud Network Engineer Question 340
Single answerGoogle Cloud PlatformYour company has a GKE cluster running in Google Cloud. The cluster's pods need to access an external API hosted on the internet, but you must ensure that all outgoing traffic from the pods is routed through a specific static external IP address for auditing purposes. Which feature or configuration in Google Cloud should you use to achieve this?
- A
Use Cloud NAT and configure a static external IP for outgoing traffic.
- B
Enable Private Google Access for the GKE nodes.
- C
Use a VPC peering connection to route traffic through a static external IP.
- D
Set up a NAT Gateway VM and assign it a static external IP.
Show answer and explanation
Correct answer: A
Explanation
To ensure that outgoing traffic from GKE pods is routed through a specific static external IP, the most efficient and managed solution is to use Cloud NAT. By configuring Cloud NAT with a static external IP, you can meet the requirements without assigning external IPs to individual nodes or setting up additional infrastructure like a NAT Gateway VM.
- A. Correct.
Cloud NAT allows your GKE cluster's nodes or pods to send outbound traffic to the internet via a specific static external IP address without requiring external IPs on the individual nodes. This is the correct approach.
- B. Incorrect.
Private Google Access allows private communication between your VPC and Google APIs/services but does not help with routing outgoing traffic through a static external IP.
- C. Incorrect.
VPC peering is used to connect two VPC networks privately, but it does not allow control over internet-bound traffic through a static external IP.
- D. Incorrect.
Setting up a NAT Gateway VM can achieve similar functionality, but it is not the recommended or managed solution in Google Cloud. Cloud NAT is the preferred approach.