Exam Professional Cloud Architect All Questions

View all questions & answers for the Professional Cloud Architect exam

Exam Professional Cloud Architect topic 1 question 156 discussion

Actual exam question from Google's Professional Cloud Architect

Question #: 156
Topic #: 1

[All Professional Cloud Architect Questions]

Your company has a Google Cloud project that uses BigQuery for data warehousing. They have a VPN tunnel between the on-premises environment and Google
Cloud that is configured with Cloud VPN. The security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing.
What should they do?

A. Configure Private Google Access for on-premises only.
B. Perform the following tasks: 1. Create a service account. 2. Give the BigQuery JobUser role and Storage Reader role to the service account. 3. Remove all other IAM access from the project.
C. Configure VPC Service Controls and configure Private Google Access.
D. Configure Private Google Access.

Show Suggested Answer

Suggested Answer: C 🗳️

by pr2web at Aug. 23, 2021, 8:13 p.m.

Comments

Submit Cancel

Craigenator

Highly Voted 3 years, 2 months ago

Without the discussion this site would be useless, many thanks to all that participate. Majority of answers are wrong...

upvoted 72 times

VarunGo

1 year, 8 months ago

you can used chatGPT now

upvoted 3 times

Murtuza

1 year, 4 months ago

Then you are definitely bound to fail :-)

upvoted 12 times

...

diaga2

Highly Voted 3 years, 4 months ago

C is the recommended one https://cloud.google.com/vpc-service-controls/docs/overview

upvoted 31 times

...

plumbig11

Most Recent 7 months ago

Selected Answer: C

They have a VPN tunnel between the on-premises environment and Google Cloud that is configured with Cloud VPN. Si the better option is VPC service controls. https://cloud.google.com/vpc-service-controls/docs/overview

upvoted 1 times

...

squishy_fishy

1 year, 1 month ago

Correct answer is C. Security benefits of VPC Service Controls Access from unauthorized networks using stolen credentials Data exfiltration by malicious insiders or compromised code https://cloud.google.com/vpc-service-controls/docs/overview#benefits

upvoted 3 times

...

thewalker

1 year, 2 months ago

Selected Answer: C

VPC Service Controls is required to stop data exfiltration. Hence C

upvoted 2 times

...

tamj123

1 year, 3 months ago

C, VPC Service controls is need for the solution

upvoted 1 times

...

Mrinalini19

1 year, 11 months ago

Selected Answer: C

C is correct

upvoted 1 times

...

examch

2 years ago

Selected Answer: C

C is the correct answer, To secure data from exfiltration by malicious insiders, compromised code or accidental oversharing, we use VPC Service controls https://cloud.google.com/vpc-service-controls/docs/overview For private access options, connect to services in VPC networks we use private service endpoints or VPC network peering. https://cloud.google.com/vpc/docs/private-access-options#connect-services

upvoted 2 times

...

surajkrishnamurthy

2 years, 1 month ago

Selected Answer: C

C is the correct answer

upvoted 2 times

...

megumin

2 years, 2 months ago

Selected Answer: C

C is ok

upvoted 2 times

...

Mahmoud_E

2 years, 3 months ago

Selected Answer: C

C is the right answer

upvoted 1 times

...

AzureDP900

2 years, 3 months ago

I will go with C

upvoted 1 times

...

nkit

2 years, 9 months ago

Selected Answer: C

Going by definition- VPC Service Controls improves your ability to mitigate the risk of data exfiltration from Google Cloud services such as Cloud Storage and BigQuery. hence C is correct

upvoted 7 times

...

dangcpped

2 years, 9 months ago

Selected Answer: C

C is the recommended https://cloud.google.com/vpc-service-controls/docs/overview

upvoted 2 times

...

kimharsh

2 years, 11 months ago

I don't get it , C is correct because of the "VPC service Control", But Privet Google access is not for on On-premises, A is for On-premises = https://cloud.google.com/vpc/docs/private-access-options

upvoted 2 times

...

OrangeTiger

3 years ago

Selected Answer: C

I agree C. The link that wroted in Reveral Solution means C.

upvoted 1 times

...

vincy2202

3 years, 1 month ago

Selected Answer: C

C is the correct answer https://cloud.google.com/vpc-service-controls/docs/overview

upvoted 2 times

...

Load full discussion...