Your company has a networking team and a development team. The development team runs applications on Compute Engine instances that contain sensitive data. The development team requires…

Question

Options

• A
  1. Create a project with a standalone VPC and assign the Network Admin role to the networking
• B
  1. Create a project with a standalone Virtual Private Cloud (VPC), assign the Network Admin role
• C
  1. Create a project with a Shared VPC and assign the Network Admin role to the networking
• D
  1. Create a project with a standalone VPC and assign the Network Admin role to the networking

• A
  3% (1)
• B
  3% (1)
• C
  84% (27)
• D
  9% (3)

Explanation

https://cloud.google.com/iam/docs/job- functions/networking#single_team_manages_security_network_for_organization In this scenario, a large organization has a central team that manages security and networking controls for the entire organization. Developers do not have permissions to make changes to any network or security settings defined by the security and networking team but they are granted permission to create resources such as virtual machines in shared subnets. To facilitate this the organization makes use of a shared VPC (Virtual Private Cloud). A shared VPC allows creation of a VPC network of RFC 1918 IP spaces that associated projects (service projects) can then use. Developers using the associated projects can create VM instances in the shared VPC network spaces. The organization's network and security admins can create subnets, VPNs, and firewall rules usable by all the projects in the VPC network

No community discussion yet for this question.