GCP PCA · Question 28 · Domain 3: Designing for Security and Compliance
A healthcare application running on Compute Engine needs to access a third-party API. The third-party API requires IP allowlisting and will only accept traffic from a single, static IP address. The application is deployed across an autoscaled Managed Instance Group (MIG). How should you configure the network to meet this requirement?
Answer options:
Assign a static external IP address to each VM in the MIG.
Route all outbound traffic through an Internal Load Balancer.
Deploy Cloud NAT and assign a static external IP address to the NAT gateway.
Use an External HTTP(S) Load Balancer with a static IP.
50 questions · hints · full answers · grading
Expert