Google Cloud Professional Cloud Architect PCA — Topic 1 Question 115

Question

Your company has sensitive data in Cloud Storage buckets. Data analysts have Identity Access Management (IAM) permissions to read the buckets. You want to prevent data analysts from retrieving the data in the buckets from outside the office network. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: 1. Create a VPC Service Controls perimeter that includes the projects with the buckets. 2. Create an access level with the CIDR of the office network. VPC Service Controls create a security perimeter around managed services to prevent data exfiltration. A VPC provides a global, software-defined private network for your Google Cloud resources.

Google Cloud Professional Cloud Architect PCA — Question 115