Google Cloud Professional Cloud Network Engineer PCNE — Topic 1 Question 104

Question

You have a Cloud Storage bucket in Google Cloud project XYZ. The bucket contains sensitive data. You need to design a solution to ensure that only instances belonging to VPCs under project XYZ can access the data stored in this Cloud Storage bucket. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Configure a VPC Service Controls perimeter around project XYZ, and include storage.googleapis.com as a restricted service in the service perimeter. VPC Service Controls create a security perimeter around managed services to prevent data exfiltration. A VPC provides a global, software-defined private network for your Google Cloud resources.

Google Cloud Professional Cloud Network Engineer PCNE — Question 104