Google Exam Professional Cloud Security Engineer Topic 4 Question 94 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 94
Topic #: 4

[All Professional Cloud Security Engineer Questions]

You have stored company approved compute images in a single Google Cloud project that is used as an image repository. This project is protected with VPC Service Controls and exists in the perimeter along with other projects in your organization. This lets other projects deploy images from the image repository project. A team requires deploying a third-party disk image that is stored in an external Google Cloud organization. You need to grant read access to the disk image so that it can be deployed into the perimeter.

What should you do?

A* 1 Update the perimeter
* 2 Configure the egressTo field to set identity Type to any_identity.
* 3 Configure the egressFrom field to include the external Google Cloud project number as an allowed resource and the serviceName to compute. googleapis. com.

B* Allow the external project by using the organizational policy
constraints/compute.trustedlmageProjects.

C* 1 Update the perimeter
* 2 Configure the egressTo field to include the external Google Cloud project number as an allowed resource and the serviceName to compute. googleapis. com.
* 3 Configure the egressFrom field to set identity Type to any_idestity.

D* 1 Update the perimeter
* 2 Configure the ingressFrcm field to set identityType to an-y_identity.
* 3 Configure the ingressTo field to include the external Google Cloud project number as an allowed resource and the serviceName to compute.googleapis -com.

Show Suggested Answer

Suggested Answer: A

by Sherly at Nov 17, 2024, 02:26 AM

Limited Time Offer

25%

24 days ago

Haha, now that's thinking outside the box! Although I'm not sure the Google Cloud team would appreciate the security implications of a fruit-based access control system.

upvoted 0 times