Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 81

Question

A customer is running an analytics workload on Google Cloud Platform (GCP) where Compute Engine instances are accessing data stored on Cloud Storage. Your team wants to make sure that this workload will not be able to access, or be accessed from, the internet. Which two strategies should your team use to meet these requirements? (Choose two.)

Accepted Answer

Correct answer: A, B. The correct answer is A, B. Option A: Configure Private Google Access on the Compute Engine subnet Option B: Avoid assigning public IP addresses to the Compute Engine cluster. Compute Engine provides configurable virtual machines when you need full control of the OS. Private Google Access lets internal instances reach Google APIs without external IPs.

Google Cloud Professional Cloud Security Engineer PCSE — Question 81