You need to enable VPC Service Controls and allow changes to perimeters in existing environments without preventing access to resources. Which VPC Service Controls mode should you use?

The correct answer is D. Dry run. In dry run mode, requests that violate the perimeter policy are not denied, only logged. Dry run mode is used to test perimeter configuration and to monitor usage of services without preventing access to resources. https://cloud.google.com/vpc-service-controls/docs/dry-run-mode

Submitted by the_admin· Apr 18, 2026Ensuring data protection

Question

You need to enable VPC Service Controls and allow changes to perimeters in existing environments without preventing access to resources. Which VPC Service Controls mode should you use?

Options

ACloud Run
BNative
CEnforced
DDry run

How the community answered

(52 responses)

A
2% (1)
B
4% (2)
C
2% (1)
D
92% (48)

Explanation

In dry run mode, requests that violate the perimeter policy are not denied, only logged. Dry run mode is used to test perimeter configuration and to monitor usage of services without preventing access to resources. https://cloud.google.com/vpc-service-controls/docs/dry-run-mode

Topics

#VPC Service Controls#Security Perimeters#Dry Run Mode#Data Exfiltration Prevention

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice