GoogleGoogle
PROFESSIONAL-CLOUD-ARCHITECT · Question #206
PROFESSIONAL-CLOUD-ARCHITECT Question #206: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-CLOUD-ARCHITECT to reveal the answer and full explanation for question #206. The question stem and answer options stay visible for context.
Submitted by kev92· Mar 30, 2026Designing for security and compliance
Question
Your organization has decided to restrict the use of external IP addresses on instances to only approved instances. You want to enforce this requirement across all of your Virtual Private Clouds (VPCs). What should you do?
Options
- ARemove the default route on all VPCs. Move all approved instances into a new subnet that has a
- BCreate a new VPC in custom mode. Create a new subnet for the approved instances, and set a
- CImplement a Cloud NAT solution to remove the need for external IP addresses entirely.
- DSet an Organization Policy with a constraint on constraints/compute.vmExternalIpAccess. List the
Unlock PROFESSIONAL-CLOUD-ARCHITECT to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-ARCHITECT questions. Unlock PROFESSIONAL-CLOUD-ARCHITECT for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Organization Policy#External IP addresses#VM instance security#Policy enforcement