Google Cloud Professional Cloud Architect PCA — Topic 1 Question 156

Question

Your company has a Google Cloud project that uses BigQuery for data warehousing. They have a VPN tunnel between the on-premises environment and Google Cloud that is configured with Cloud VPN. The security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing. What should they do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Configure VPC Service Controls and configure Private Google Access. Private Google Access lets internal instances reach Google APIs without external IPs. VPC Service Controls create a security perimeter around managed services to prevent data exfiltration. A VPC provides a global, software-defined private network for your Google Cloud resources.

Google Cloud Professional Cloud Architect PCA — Question 156