Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
Your security team manages the Network security in your organization. There is a need to allow Compute Engine Instances without external IPs to access Google APIs.
What can you do to achieve this?
A. Grant IAM permissions needed to perform tasks on the APIs.
B. Setup Context-aware access with ingress rules.
C. Enable Private Google Access.
D. Set up ingress firewall rules to allow traffic.
Correct Answer: C
- Option A is incorrect. IAM permissions will not grant access to Google APIs without external IP, Cloud NAT or Private Google Access.
- Option B is incorrect. Context-aware access ingress rule setup is used to allow access to resources based on client attributes such as network origin (IP address or VPC network), identity type (service account or user), identity, and device data. Access is defined by ingress rules.
- Option C is CORRECT. Private Google access will enable VMs in a VPC to access APIs and services without an external IP.
- Option D is incorrect. Firewall rules cannot grant access to Google APIs without external IP.
Reference:
Comments are closed, but trackbacks and pingbacks are open.