Exam Professional Cloud Security Engineer topic 1 question 81 discussion

AB suits well

Ans : AB

AE A. Configuring Private Google Access on the Compute Engine subnet: This feature enables instances without public IP addresses to connect to Google APIs and services over internal IP addresses, ensuring that the instances cannot be accessed from the internet. E. Configuring a Cloud NAT gateway: This ensures that instances within the VPC can connect to the internet, but only to specific IP ranges and ports and it also ensures that the instances cannot initiate connection to the internet. By configuring both options, you are providing your Compute Engine instances with a way to access Google services while also being isolated from the internet and that is the best way to ensure that this workload will not be able to access, or be accessed from, the internet.

A,B Has to be A and B together. A (Private Google Access) has minimal effect on instances with public IP so we also need to avoid assigning public IP to get the desired (internal only) effect. https://cloud.google.com/vpc/docs/private-google-access

AB, A to access the cloud storage privately

BE. no public ip in vm and nat to access the cloud storage

AE A. Configuring Private Google Access on the Compute Engine subnet: This feature enables instances without public IP addresses to connect to Google APIs and services over internal IP addresses, ensuring that the instances cannot be accessed from the internet. E. Configuring a Cloud NAT gateway: This ensures that instances within the VPC can connect to the internet, but only to specific IP ranges and ports and it also ensures that the instances cannot initiate connection to the internet. By configuring both options, you are providing your Compute Engine instances with a way to access Google services while also being isolated from the internet and that is the best way to ensure that this workload will not be able to access, or be accessed from, the internet.

AB is correct A. Configure Private Google Access on the Compute Engine subnet B. Avoid assigning public IP addresses to the Compute Engine cluster.

A. Configure Private Google Access on the Compute Engine subnet B. Avoid assigning public IP addresses to the Compute Engine cluster.

agree with all the others

B and E: "make sure that this workload will not be able to access, or be accessed from, the internet." If we have cloud NAT we are able to access the internet! Also with public IP.

Not A https://cloud.google.com/vpc/docs/private-google-access

if you Avoid assigning public IP addresses to the Compute Engine cluster the instance could access to internet if have a nat gateway, maybe the answer is A and D

A and B is correct

Ans - AB

AB is the correct answer.

B,D not A Private google access provides public google api access without public IP