Google Exam Professional Cloud Security Engineer Topic 1 Question 66 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 66
Topic #: 1

[All Professional Cloud Security Engineer Questions]

You define central security controls in your Google Cloud environment for one of the folders in your organization you set an organizational policy to deny the assignment of external IP addresses to VMs. Two days later you receive an alert about a new VM with an external IP address under that folder.

What could have caused this alert?

AThe VM was created with a static external IP address that was reserved in the project before the organizational policy rule was set.

BThe organizational policy constraint wasn't properly enforced and is running in 'dry run mode.

CAt project level, the organizational policy control has been overwritten with an 'allow' value.

DThe policy constraint on the folder level does not have any effect because of an allow' value for that constraint on the organizational level.

Show Suggested Answer

Suggested Answer: A

by Billye at Oct 08, 2023, 06:56 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!