ExamTopics Logo
Mail Us[email protected]
Menu
Google Discussions
exam questions

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam
Go to Exam

Exam Professional Cloud Security Engineer topic 1 question 93 discussion

Actual exam question from Google's Professional Cloud Security Engineer
Question #: 93
Topic #: 1
[All Professional Cloud Security Engineer Questions]

You are part of a security team that wants to ensure that a Cloud Storage bucket in Project A can only be readable from Project B. You also want to ensure that data in the Cloud Storage bucket cannot be accessed from or copied to Cloud Storage buckets outside the network, even if the user has the correct credentials.
What should you do?

  • A. Enable VPC Service Controls, create a perimeter with Project A and B, and include Cloud Storage service.
  • B. Enable Domain Restricted Sharing Organization Policy and Bucket Policy Only on the Cloud Storage bucket.
  • C. Enable Private Access in Project A and B networks with strict firewall rules to allow communication between the networks.
  • D. Enable VPC Peering between Project A and B networks with strict firewall rules to allow communication between the networks.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Jerrard at Oct. 7, 2020, 9:03 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
FatCharlie
Highly Voted 3 years, 5 months ago
The answer is A. This is question is covered by an example given for VPC Service Perimeters https://cloud.google.com/vpc-service-controls/docs/overview#isolate
upvoted 20 times
AzureDP900
1 year, 6 months ago
A is right
upvoted 2 times
...
...
[Removed]
Most Recent 9 months, 1 week ago
Selected Answer: A
"A" VPC Service controls were created for this type of use case. https://cloud.google.com/vpc-service-controls/docs/overview#isolate
upvoted 2 times
...
alleinallein
1 year, 1 month ago
Why not D?
upvoted 1 times
...
shayke
1 year, 4 months ago
Selected Answer: A
A - a classic VPCSC question
upvoted 2 times
...
AwesomeGCP
1 year, 6 months ago
Selected Answer: A
A. Enable VPC Service Controls, create a perimeter with Project A and B, and include Cloud Storage service.
upvoted 3 times
...
cloudprincipal
1 year, 11 months ago
Selected Answer: A
https://cloud.google.com/vpc-service-controls/docs/overview#isolate
upvoted 2 times
...
nilb94
2 years, 8 months ago
A - VPC Service Controls
upvoted 3 times
...
jeeet_
2 years, 11 months ago
Answer is most positively A. VPC service controls lets Security team create fine-grained Perimeter across projects within organization. -> Security perimeter for API-Based services like Bigtable instances, Storage and Bigquery datasets.. are a kind of super powers for VPC Service control. well in my test, I chose option B, but Domain Restricted Organization policies are for limiting resource sharing based on domain. so if you're out in internet, and have credentials you still can access resources based on your domain access level. So B option is wrong.
upvoted 2 times
...
HateMicrosoft
3 years, 1 month ago
The correct answer is: A This is obtained by the VPC Service Controls by the perimeter setup. Overview of VPC Service Controls https://cloud.google.com/vpc-service-controls/docs/overview
upvoted 2 times
...
jonclem
3 years, 5 months ago
I would say option A is a better fit due to VPC Service Controls.
upvoted 3 times
...
jonclem
3 years, 5 months ago
I'd be inclined to agree, option B seems a better fit. Here's my reasoning behind it: https://cloud.google.com/access-context-manager/docs/overview
upvoted 1 times
jonclem
3 years, 5 months ago
please ignore this comment, wrong question.
upvoted 1 times
...
...
saurabh1805
3 years, 6 months ago
what is being asked is data exfiltration as well and which can be only achieved via VPC permiter and created a bridge between both project.
upvoted 1 times
Ducle
3 years, 6 months ago
A is better
upvoted 2 times
...
...
[Removed]
3 years, 6 months ago
Ans - B
upvoted 1 times
...
Jerrard
3 years, 6 months ago
B. https://cloud.google.com/resource-manager/docs/organization-policy/restricting-domains
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago