Google Cloud Professional Cloud Security Engineer PCSE — Question 211

• ALimit the physical location of a new resource with the Organization Policy Service "resource locations constraint."
• BUse Cloud IDS to get east-west and north-south traffic visibility in the EU to monitor intra-VPC and inter-VPC communication.
• CLimit Google personnel access based on predefined attributes such as their citizenship or geographic location by using Key Access Justifications.
• DUse identity federation to limit access to Google Cloud resources from non-EU entities.
• EUse VPC Flow Logs to monitor intra-VPC and inter-VPC traffic in the EU.

Select 2 answers to reveal the result.