Google
PROFESSIONAL-CLOUD-NETWORK-ENGINEER · Question #128
You have two Google Cloud projects in a perimeter to prevent data exfiltration. You need to move a third project inside the perimeter; however, the move could negatively impact the existing…
The correct answer is B. Modify the existing VPC Service Controls policy to include the new project in dry run mode. https://cloud.google.com/vpc-service-controls/docs/dry-run-mode
Submitted by wei.xz· Apr 18, 2026Implementing network security
Question
You have two Google Cloud projects in a perimeter to prevent data exfiltration. You need to move a third project inside the perimeter; however, the move could negatively impact the existing environment. You need to validate the impact of the change. What should you do?
Options
- AEnable Firewall Rules Logging inside the third project.
- BModify the existing VPC Service Controls policy to include the new project in dry run mode.
- CMonitor the Resource Manager audit logs inside the perimeter.
- DEnable VPC Flow Logs inside the third project, and monitor the logs for negative impact.
How the community answered
(30 responses)- A10% (3)
- B80% (24)
- C7% (2)
- D3% (1)
Explanation
https://cloud.google.com/vpc-service-controls/docs/dry-run-mode
Topics
#VPC Service Controls#Security Perimeter#Dry Run Mode#Impact Analysis
Community Discussion
No community discussion yet for this question.