You need to enforce a security policy in your Google Cloud organization that prevents users...

Question

You need to enforce a security policy in your Google Cloud organization that prevents users from exposing objects in their buckets externally. There are currently no buckets in your organization. Which solution should you implement proactively to achieve this goal with the least operational overhead?

Accepted Answer

B. Enable the constraints/storage.publicAccessPrevention constraint at the organization level.

Answer

A. Create an hourly cron job to run a Cloud Function that finds public buckets and makes them private.

Answer

C. Enable the constraints/storage.uniformBucketLevelAccess constraint at the organization level.

Answer

D. Create a VPC Service Controls perimeter that protects the storage.googleapis.com service in your projects that contains buckets. Add any new project that contains a bucket to the perimeter.

Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam Professional-Cloud-Security-Engineer All Questions

Google Cloud Certified Professional-Cloud-Security-Engineer Question # 53 Topic 6 Discussion

Correct Answer:

Options Selected by Other Users:

Contribute your Thoughts: