Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
A customer wants to restrict the images used to create compute engine instances in the projects of its Google Organisation. The security team has a project where hardened images will be created and stored.
How can you restrict another project to use only images created in the security team’s project?
A. Customize and enforce the policy “Define trusted image projects”.
B. Create a service boundary around the Project using VPC Service Controls.
C. Restrict the IAM permission assigned to users in that project.
D. Create a VPC peering between VPCs in both projects.
Correct Answer: A
- Option A is CORRECT. This policy is used to specify projects whose images can be used for instance creation.
- Option B is incorrect. This does not restrict the project whose images can be used.
- Option C is incorrect. IAM permission can be set at the project level, and it cannot be used to restrict the images that can be used for image creation.
- Option D is incorrect. VPC peering cannot be used to restrict the images that can be used for image creation.
References:
Comments are closed, but trackbacks and pingbacks are open.