Question 168 of 318
Choose 2You have created an OS image that is hardened per your organization's security standards and is being stored in a project managed by the security team. As a
Google Cloud administrator, you need to make sure all VMs in your Google Cloud organization can only use that specific OS image while minimizing operational overhead. What should you do? (Choose two.)
AGrant users the compute.imageUser role in their own projects.
✓BGrant users the compute.imageUser role in the OS image project.
CStore the image in every project that is spun up in your organization.
✓DSet up an image access organization policy constraint, and list the security team managed project in the project's allow list.
ERemove VM instance creation permission from users of the projects, and only allow you and your team to create VM instances.
✓
Correct Answer: B, D
Grant users the compute.imageUser role in the OS image project.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.