Practice Test 1 | Google Cloud Certified Professional Cloud Network Engineer | Dumps | Mock Test
You are the Network Engineer in a public sector firm. The firm want to use a Shared VPC to enable secure communication between services from multiple projects. The CTO wants a restriction that prevents that accidental deletion of the Shared VPC host project
As the network Engineer, how can you achieve this with minimal overhead?
A. Create the Host project in a separate GCP Organization and attach Service Projects from other Organizations
B. Apply a project-level policy to limit users who can manually remove the liens that protect the Shared VPC host projects
C. Apply an organization-level policy to limit users who can manually remove the liens that protect the Shared VPC host projects
D. Ensure only authorized users have the roles/resourcemanager.lienModifier permission at organization level
Correct Answer: C
- Option A is incorrect. A Shared VPC host project and service projects must be in the same organization.
- Option B is incorrect. The lien is a special lock placed on the Shared VPC host project to prevent it from being deleted but the lien can be manually removed. This option introduces the overhead of adding the policy to all projects where a Shared VPC is created.
- Option C is correct. The lien is a special lock placed on the Shared VPC host project to prevent it from being deleted but the lien can be manually removed. This option will apply to all projects in the organization.
- Option D is incorrect. users with the roles/resourcemanager.lienModifier permission are not the only ones who can delete the lien. Project owners can also remove the lien from a project.
References:
Comments are closed, but trackbacks and pingbacks are open.