Your organization is using Vertex AI Workbench Instances. You must ensure that newly deployed Instances are automatically kept up-to-date and that users cannot accidentally alter settings in the operating system. What should you do?
A.
Enforce the disableRootAccesa and requireAutoUpgradeSchedule organization policies for newly deployed Instances.
B.
Enable the VM Manager and ensure the corresponding Google Compute Engine instances are added.
C.
Implement a firewall rule that prevents Secure Shell access to the corresponding Google Compute Engine instances by using tags.
D.
Assign the AI Notebooks Runner and AI Notebooks Viewer roles to the users of the AI Workbench Instances.
Why B is Correct:
VM Manager:
VM Manager automates the management of Compute Engine instances, including patch management and configuration updates.
By enabling VM Manager, you ensure that operating systems of Vertex AI Workbench instances are automatically kept up-to-date with the latest security patches and updates.
Automatic Enrollment:
When VM Manager is enabled, you can enroll the corresponding GCE instances and enforce compliance with organizational policies.
Control Over System Configurations:
VM Manager allows you to enforce configuration settings, preventing users from making unauthorized changes to the OS.
A - disableRootAccess: This organization policy prevents users from accessing the root account of the underlying Google Compute Engine instance, which helps to prevent accidental configuration changes.
requireAutoUpgradeSchedule: This organization policy ensures that instances are automatically upgraded to the latest operating system patches, keeping them secure and up-to-date.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Pime13
4 months, 3 weeks agoBPzen
5 months agojson4u
6 months, 2 weeks agoabdelrahman89
6 months, 3 weeks ago