Topic 1 Question 127

Professional Cloud Security Engineer

Topic 1 Question 127
You want to prevent users from accidentally deleting a Shared VPC host project. Which organization-level policy constraint should you enable?
- compute.restrictSharedVpcHostProjects
- compute.restrictXpnProjectLienRemoval
- compute.restrictSharedVpcSubnetworks
- compute.sharedReservationsOwnerProjects
解説
Reference: https://cloud.google.com/vpc/docs/provisioning-shared-vpc

ユーザの投票
コメント(3)
- Answer is (B).
  
  This boolean constraint restricts the set of users that can remove a Shared VPC project lien without organization-level permission where this constraint is set to True. https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints
  
  👍 8
  Tabayashi2022/04/28
- 正解だと思う選択肢: B
  B is the answer.
  
  https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints#constraints-for-specific-services
  
  constraints/compute.restrictXpnProjectLienRemoval
  
  Restrict shared VPC project lien removal This boolean constraint restricts the set of users that can remove a Shared VPC host project lien without organization-level permission where this constraint is set to True. By default, any user with the permission to update liens can remove a Shared VPC host project lien. Enforcing this constraint requires that permission be granted at the organization level.
  👍 7
  zellck2022/09/27
- 正解だと思う選択肢: B
  https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints
  
  👍 2
  mikesp2022/06/03
シャッフルモード

解説

ユーザの投票

コメント(3)