nerdexam
Google

PROFESSIONAL-CLOUD-DATABASE-ENGINEER · Question #63

Your project is using Bigtable to store data that should not be accessed from the public internet under any circumstances, even if the requestor has a valid service account key. You need to secure acc

Sign in or unlock PROFESSIONAL-CLOUD-DATABASE-ENGINEER to reveal the answer and full explanation for question #63. The question stem and answer options stay visible for context.

Securing Database Solutions

Question

Your project is using Bigtable to store data that should not be accessed from the public internet under any circumstances, even if the requestor has a valid service account key. You need to secure access to this data. What should you do?

Options

  • AUse Identity and Access Management (IAM) for Bigtable access control.
  • BUse VPC Service Controls to create a trusted network for the Bigtable service.
  • CUse customer-managed encryption keys (CMEK).
  • DUse Google Cloud Armor to add IP addresses to an allowlist.

Unlock PROFESSIONAL-CLOUD-DATABASE-ENGINEER to see the answer

You've previewed enough free PROFESSIONAL-CLOUD-DATABASE-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-DATABASE-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#VPC Service Controls#Bigtable Security#Network Perimeter#Data Access Control
Full PROFESSIONAL-CLOUD-DATABASE-ENGINEER Practice