Exam Professional Cloud Network Engineer topic 1 question 212 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 212
Topic #: 1

[All Professional Cloud Network Engineer Questions]

You are implementing a Shared VPC network for your organization, which has distributed teams. One of the application developers works across several teams and notices that they can deploy applications in subnets that are reserved for another application's service projects. You want to ensure that developers can only deploy resources in the subnets that are reserved for their respective service project. What should you do?

A. Specify which Shared VPC subnets each application's service projects can access by using the constraints/compute.restrictSharedVpcSubnetworks organizational constraint.
B. Grant the compute.NetworkViewer role to the developer in the Shared VPC host project.
C. Restrict another application's project from accessing specific subnets in the host project by using the constraints/compute.restrictSharedVpcHostProject organizational constraint.
D. Grant the compute.NetworkUser role to the developer in the specific Shared VPC service project.

Show Suggested Answer

Suggested Answer: A 🗳️

by certguy99 at April 7, 2025, 2:14 a.m.

Comments

Submit Cancel

n2183712847

1 month, 2 weeks ago

Selected Answer: A

A. The constraints/compute.restrictSharedVpcSubnetworks organizational constraint provides the granular control needed to restrict service projects to using only their designated Shared VPC subnets, ensuring that developers cannot deploy resources in unauthorized areas of the network.

upvoted 1 times

...

certguy99

2 months, 1 week ago

Selected Answer: A

https://medium.com/@nikhil.nagarajappa/restricting-shared-vpc-access-in-service-project-be107ed522c2

upvoted 1 times

...