Google Cloud Professional Cloud Architect PCA — Topic 1 Question 200

Question

Your company has a Google Cloud project that uses BigOuery for data warehousing. The VPN tunnel between the on-premises environment and Google Cloud is configured with Cloud VPN. Your security team wants to avoid data exfiltration by malicious insiders, compromised code, and accidental oversharing. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Configure VPC Service Controls and configure Private Google Access for on-promises hosts. Private Google Access lets internal instances reach Google APIs without external IPs. VPC Service Controls create a security perimeter around managed services to prevent data exfiltration. A VPC provides a global, software-defined private network for your Google Cloud resources.

Google Cloud Professional Cloud Architect PCA — Question 200