Practice Test 1 | Google Cloud Certified Professional Cloud Network Engineer | Dumps | Mock Test
A company recently had a data exfiltration breach. The company has been advised to utilise VPC Service controls to secure environments with highly sensitive data. As the network engineer, you have been asked to test out some new policies in the production project to see the impact it will have without denying access to resources.
How can this be achieved?
A. Select the Dry run mode as the perimeter mode. Define a new service perimeter in the production project
B. Select the Enforced mode as the perimeter mode. Define a new service perimeter in the production project
C. Select the Enforced mode as the perimeter mode. Define a new service perimeter at the organization level and add the production project
D. Select the Dry run mode as the perimeter mode. Define a new service perimeter at the organization level and add the production project
Correct Answer: D
- Option A is incorrect. VPC Service control perimeters are created at the organisation level, not at the project level.
- Option B is incorrect. VPC Service control perimeters are created at the organisation level not at the project level. The enforced mode implements the policies and will affect access to resources.
- Option C is incorrect. The enforced mode will apply the policies and this will affect access to resources.
- Option D is correct. VPC Service control perimeters are created at the organisation level and the dry run mode is used to test service perimeter policies without affecting access. In dry run mode, requests that violate the perimeter policy are not denied, only logged. Dry run mode is used to test perimeter configuration and to monitor the usage of services without preventing access to resources
Reference:
Comments are closed, but trackbacks and pingbacks are open.