Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 57

Question

Your team wants to make sure Compute Engine instances running in your production project do not have public IP addresses. The frontend application Compute Engine instances will require public IPs. The product engineers have the Editor role to modify resources. Your team wants to enforce this requirement. How should your team meet these requirements?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Set up an organization policy to only permit public IPs for the front-end Compute Engine instances. Compute Engine provides configurable virtual machines when you need full control of the OS. Organization Policy sets guardrails that constrain how resources can be configured across the org.

Google Cloud Professional Cloud Security Engineer PCSE — Question 57