Question 170 of 202
Single answerYour company allows teams to self-manage Google Cloud projects, including project-level Identity and Access Management (IAM). You are concerned that the team responsible for the Shared VPC project might accidentally delete the project, so a lien has been placed on the project. You need to design a solution to restrict Shared VPC project deletion to those with the resourcemanager.projects.updateLiens permission at the organization level. What should you do?
A. Instruct teams to only perform IAM permission management as code with Terraform.
B. Enable VPC Service Controls for the container.googleapis.com API service.
C. Revoke the resourcemanager.projects.updateLiens permission from all users associated with the project.
D. Enable the compute.restrictXpnProjectLienRemoval organization policy constraint.
<p>D. Enable the compute.restrictXpnProjectLienRemoval organization policy constraint.</p>
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.