A company has a GKE cluster with a public endpoint. They want to restrict access to the cluster's Kubernetes API server to only their office IP range. They also want to allow a small set of administrators to access the cluster from anywhere using IAM. What should they do?

Use a firewall rule to allow traffic from the office IP range to the API server, and use IAM roles for admin access.

Use a Cloud VPN to connect the office to the VPC, and use IAM roles for admin access.

Use authorized networks to restrict access to the API server to the office IP range, and use IAM roles to grant admin access.

Use a private cluster and connect via VPC peering, and use IAM roles for admin access.

Google CloudProfessional Cloud Architect

Domain 2Objective 3

2.3 Configuring Compute Systems PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 7)

Part of the Managing and provisioning a cloud solution infrastructure domain, which accounts for ~17.5% of the PROFESSIONAL-CLOUD-ARCHITECT exam. Google Cloud does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–9 in this domain), expect 2–2 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

~17.5%of the exam

Questions 31–31

31expert · hard
A company has a GKE cluster with a public endpoint. They want to restrict access to the cluster's Kubernetes API server to only their office IP range. They also want to allow a small set of administrators to access the cluster from anywhere using IAM. What should they do?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PROFESSIONAL-CLOUD-ARCHITECT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Google Cloud. “PROFESSIONAL-CLOUD-ARCHITECT” is a trademark of its owner, used for identification only.

2.3 Configuring Compute Systems PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 7)

Questions 31–31

A company has a GKE cluster with a public endpoint. They want to restrict access to the cluster's Kubernetes API server to only their office IP range. They also want to allow a small set of administrators to access the cluster from anywhere using IAM. What should they do?

Keep studying — Managing and provisioning a cloud solution infrastructure