A customer wants to run a batch processing system on VMs and store the output files in a Cloud Storage bucket. The networking and security teams have decided that no VMs may reach the public…

The correct answer is C. Enable Private Google Access on the VPC. Since Network and Security Team has decided to disable internet access, the only option left is the Google Private Access option.

Submitted by emma.c· Apr 18, 2026Configuring access within a cloud solution environment

Question

A customer wants to run a batch processing system on VMs and store the output files in a Cloud Storage bucket. The networking and security teams have decided that no VMs may reach the public internet. How should this be accomplished?

Options

ACreate a firewall rule to block internet traffic from the VM.
BProvision a NAT Gateway to access the Cloud Storage API endpoint.
CEnable Private Google Access on the VPC.
DMount a Cloud Storage bucket as a local filesystem on every VM.

How the community answered

(27 responses)

A
4% (1)
B
11% (3)
C
81% (22)
D
4% (1)

Explanation

Since Network and Security Team has decided to disable internet access, the only option left is the Google Private Access option.

Topics

#Private Google Access#VPC Networking#Cloud Storage Access#Private Connectivity

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice