Question 216 of 318
Single answerYou manage one of your organization's Google Cloud projects (Project A). A VPC Service Control (SC) perimeter is blocking API access requests to this project, including Pub/Sub. A resource running under a service account in another project (Project B) needs to collect messages from a Pub/Sub topic in your project. Project B is not included in a VPC SC perimeter. You need to provide access from Project B to the Pub/Sub topic in Project A using the principle of least privilege.
What should you do?
✓AConfigure an ingress policy for the perimeter in Project A, and allow access for the service account in Project B to collect messages.
BCreate an access level that allows a developer in Project B to subscribe to the Pub/Sub topic that is located in Project A.
CCreate a perimeter bridge between Project A and Project B to allow the required communication between both projects.
DRemove the Pub/Sub API from the list of restricted services in the perimeter configuration for Project A.
✓
Correct Answer: A
Configure an ingress policy for the perimeter in Project A, and allow access for the service account in Project B to collect messages.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.