Question 199 of 307
Single answerYour organization has two Google Cloud projects, project A and project B. In project A, you have a Pub/Sub topic that receives data from confidential sources. Only the resources in project A should be able to access the data in that topic. You want to ensure that project B and any future project cannot access data in the project A topic. What should you do?
AAdd firewall rules in project A so only traffic from the VPC in project A is permitted.
✓BConfigure VPC Service Controls in the organization with a perimeter around project A.
CUse Identity and Access Management conditions to ensure that only users and service accounts in project A. can access resources in project A.
DConfigure VPC Service Controls in the organization with a perimeter around the VPC of project A.
✓
Correct Answer: B
Configure VPC Service Controls in the organization with a perimeter around project A.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.