Topic 1 Question 186

Professional Cloud Security Engineer

Topic 1 Question 186
You have stored company approved compute images in a single Google Cloud project that is used as an image repository. This project is protected with VPC Service Controls and exists in the perimeter along with other projects in your organization. This lets other projects deploy images from the image repository project. A team requires deploying a third-party disk image that is stored in an external Google Cloud organization. You need to grant read access to the disk image so that it can be deployed into the perimeter.

What should you do?
- Allow the external project by using the organizational policy, constraints/compute.trustedImageProjects.
- 1. Update the perimeter.
  2. Configure the egressTo field to include the external Google Cloud project number as an allowed resource and the serviceName to compute.googleapis.com.
  3. Configure the egressFrom field to set identityType to ANY_IDENTITY.
- 1. Update the perimeter.
  2. Configure the ingressFrom field to set identityType to ANY_IDENTITY.
  3. Configure the ingressTo field to include the external Google Cloud project number as an allowed resource and the serviceName to compute.googleapis.com.
- 1. Update the perimeter.
  2. Configure the egressTo field to set identityType to ANY_IDENTITY.
  3. Configure the egressFrom field to include the external Google Cloud project number as an allowed resource and the serviceName to compute.googleapis.com.
ユーザの投票
コメント(9)
- I choose option C. Since the external disk image needs to be deployed into the perimeter, resources inside the perimeter need read access to the external disk image. This requires configuring ingress rules in the perimeter.
  
  👍 4
  ymkk2023/08/17
- 正解だと思う選択肢: B
  B is the correct
  
  👍 2
  pfilourenco2023/08/04
- 正解だと思う選択肢: B
  A Compute Engine client within a service perimeter calling a Compute Engine create operation where the image resource is outside the perimeter. https://cloud.google.com/vpc-service-controls/docs/ingress-egress-rules#:~:text=Egress%20Refers%20to%20any%20access,resource%20is%20outside%20the%20perimeter.
  
  👍 2
  anshad6662023/08/20
シャッフルモード

ユーザの投票

コメント(9)