Google Professional Cloud Network Engineer Question 579
Single answerGoogle Cloud PlatformYour organization is using Google Cloud to host a web application. The application is deployed in a private subnet of a VPC and needs to communicate with external APIs over the internet. You are tasked with configuring Cloud NAT for the private instances to enable outbound internet access. The organization has a requirement to use a fixed set of NAT IP addresses for auditing and compliance purposes. How should you configure the NAT IP addresses?
- A
Use automatic allocation of NAT IP addresses to let Google Cloud manage the IP range dynamically.
- B
Manually reserve static external IP addresses and assign them to the Cloud NAT configuration.
- C
Configure a custom route in the VPC to use Google public IP ranges for outbound traffic.
- D
Deploy an internet gateway and assign it to the private subnet for external communication.
Show answer and explanation
Correct answer: B
Explanation
To meet the organization's requirement of using a fixed set of NAT IP addresses for compliance and auditing, you must reserve static external IP addresses and assign them to the Cloud NAT configuration. This ensures that all outbound traffic from private instances uses the specified static IPs. Automatic allocation does not provide control over the IP range, and other options do not align with the functionality of Cloud NAT in Google Cloud.
- A. Incorrect.
Incorrect. Automatic allocation of NAT IP addresses does not allow you to use a fixed set of IP addresses, making it unsuitable for compliance and auditing requirements.
- B. Correct.
Correct. Manually reserving static external IP addresses and assigning them to the Cloud NAT configuration ensures the use of a fixed set of IPs, meeting the compliance and auditing requirements.
- C. Incorrect.
Incorrect. Configuring a custom route to use Google public IP ranges is not a valid configuration for enabling outbound internet access for private instances.
- D. Incorrect.
Incorrect. Deploying an internet gateway is not a valid option in Google Cloud and does not align with the use of Cloud NAT for private instances.