Exam Professional Cloud Network Engineer topic 1 question 127 discussion

Actual exam question from Google's Professional Cloud Network Engineer

Question #: 127
Topic #: 1

[All Professional Cloud Network Engineer Questions]

Your organization has a single project that contains multiple Virtual Private Clouds (VPCs). You need to secure API access to your Cloud Storage buckets and BigQuery datasets by allowing API access only from resources in your corporate public networks. What should you do?

A. Create an access context policy that allows your VPC and corporate public network IP ranges, and then attach the policy to Cloud Storage and BigQuery.
B. Create a VPC Service Controls perimeter for your project with an access context policy that allows your corporate public network IP ranges.
C. Create a firewall rule to block API access to Cloud Storage and BigQuery from unauthorized networks.
D. Create a VPC Service Controls perimeter for each VPC with an access context policy that allows your corporate public network IP ranges.

Show Suggested Answer

Suggested Answer: B 🗳️

by ccieman2016 at Dec. 3, 2022, 9:10 p.m.

Comments

Submit Cancel

ccieman2016

Highly Voted 1 year ago

Selected Answer: B

B is correct. https://cloud.google.com/vpc-service-controls/docs/create-service-perimeters

upvoted 7 times

AzureDP900

1 year ago

Yes, It is B

upvoted 1 times

...

pk349

Most Recent 11 months, 1 week ago

• B. Create a VPC Service Controls perimeter for your project ***** with an access context policy that allows your corporate public network IP ranges.

upvoted 1 times

...