Exam Professional Cloud Network Engineer topic 1 question 113 discussion

Looks like b https://cloud.google.com/vpc-service-controls/docs/dry-run-mode

It's B

• B. Modify the existing VPC ***** Service Controls policy to include the new project in dry run mode. Dry run mode for Service Perimeters When using VPC Service Controls, it can be difficult to determine the impact to your environment when a service perimeter is created or modified. With dry run mode, you can better understand the impact of enabling VPC Service Controls and changes to perimeters in existing environments. In dry run mode, requests that violate the perimeter policy are not denied, only logged. Dry run mode is used to test perimeter configuration and to monitor usage of services without preventing access to resources. Common use cases include: • Determining the impact that changes to existing service ***** perimeters will have. • Previewing the impact that new service perimeters will have.

Correct answer - B https://cloud.google.com/vpc-service-controls/docs/dry-run-mode#:~:text=With%20dry%20run%20mode%2C%20you%20can%20better%20understand%20the%20impact%20of%20enabling%20VPC%20Service%20Controls%20and%20changes%20to%20perimeters%20in%20existing%20environments.

B is right answer n dry run mode, requests that violate the perimeter policy are not denied, only logged. Dry run mode is used to test perimeter configuration and to monitor usage of services without preventing access to resources. Common use cases include: Determining the impact that changes to existing service perimeters will have. Previewing the impact that new service perimeters will have. Monitoring requests to protected services that originate from outside a service perimeter. For example, seeing where requests to a given service are coming from, or to identify unexpected service usage in your organization. In your development environments, creating an analogous perimeter architecture to your production environment. This allows you to identify and mitigate any issues that will be caused by your service perimeters before pushing changes to your production environment. Service perimeters can exist using dry run mode exclusively. You can also have service perimeters that use a hybrid of enforced and dry run modes. https://cloud.google.com/vpc-service-controls/docs/dry-run-mode