You have an application that runs on Compute Engine VM instances in a custom Virtual Private Cloud (VPC). Your company's security policies only allow the use of internal IP addresses on VM instances a

Question

Options

• AEnable Private Service Access on the Cloud Storage Bucket.
• BAdd storage.googleapis.com to the list of restricted services in a VPC Service Controls perimeter
• CEnable Private Google Access on the subnet within the custom VPC.
• DDeploy a Cloud NAT instance and route the traffic to the dedicated IP address of the Cloud

• A
  3% (1)
• B
  6% (2)
• C
  88% (28)
• D
  3% (1)

Explanation

Private Google Access lets you connect VM instances to GCP services without external IP addresses and only internal. A is wrong because even though Private Services Access lets you also access GCP and other services through internal IPs, it also allows the VMs to have external https://cloud.google.com/vpc/docs/private-google-access

No community discussion yet for this question.