Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 93

Question

You are part of a security team that wants to ensure that a Cloud Storage bucket in Project A can only be readable from Project B. You also want to ensure that data in the Cloud Storage bucket cannot be accessed from or copied to Cloud Storage buckets outside the network, even if the user has the correct credentials. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Enable VPC Service Controls, create a perimeter with Project A and B, and include Cloud Storage service. Cloud Storage provides durable, scalable object storage that is fully managed. VPC Service Controls create a security perimeter around managed services to prevent data exfiltration. A VPC provides a global, software-defined private network for your Google Cloud resources.

Google Cloud Professional Cloud Security Engineer PCSE — Question 93