Topic 1 Question 305
Your organization is using Vertex AI Workbench Instances. You must ensure that newly deployed Instances are automatically kept up-to-date and that users cannot accidentally alter settings in the operating system. What should you do?
Enforce the disableRootAccesa and requireAutoUpgradeSchedule organization policies for newly deployed Instances.
Enable the VM Manager and ensure the corresponding Google Compute Engine instances are added.
Implement a firewall rule that prevents Secure Shell access to the corresponding Google Compute Engine instances by using tags.
Assign the AI Notebooks Runner and AI Notebooks Viewer roles to the users of the AI Workbench Instances.
ユーザの投票
コメント(4)
A - disableRootAccess: This organization policy prevents users from accessing the root account of the underlying Google Compute Engine instance, which helps to prevent accidental configuration changes. requireAutoUpgradeSchedule: This organization policy ensures that instances are automatically upgraded to the latest operating system patches, keeping them secure and up-to-date.
👍 3abdelrahman892024/10/04- 正解だと思う選択肢: A
It's A. Well explained below.
👍 2json4u2024/10/15 - 正解だと思う選択肢: B
Why B is Correct: VM Manager:
VM Manager automates the management of Compute Engine instances, including patch management and configuration updates. By enabling VM Manager, you ensure that operating systems of Vertex AI Workbench instances are automatically kept up-to-date with the latest security patches and updates. Automatic Enrollment:
When VM Manager is enabled, you can enroll the corresponding GCE instances and enforce compliance with organizational policies. Control Over System Configurations:
VM Manager allows you to enforce configuration settings, preventing users from making unauthorized changes to the OS.
👍 1BPzen2024/11/28
シャッフルモード