Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 256

Question

Your organization has two VPC Service Controls service perimeters, Perimeter-A and Perimeter-B, in Google Cloud. You want to allow data to be copied from a Cloud Storage bucket in Perimeter-A to another Cloud Storage bucket in Perimeter-B. You must minimize exfiltration risk, only allow required connections, and follow the principle of least privilege. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Configure an egress rule for the Cloud Storage bucket in Perimeter-A and a corresponding ingress rule in Perimeter-B. Cloud Storage provides durable, scalable object storage that is fully managed.

Google Cloud Professional Cloud Security Engineer PCSE — Question 256