nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #169

You want to update your existing VPC Service Controls perimeter with a new access level. You need to avoid breaking the existing perimeter with this change, and ensure the least disruptions to users…

The correct answer is D. Enable the dry run mode on your perimeter. Add your new access level to the perimeter dry run. https://cloud.google.com/vpc-service-controls/docs/dry-run-mode When using VPC Service Controls, it can be difficult to determine the impact to your environment when a service perimeter is created or modified. With dry run mode, you can better understand the impact of enabling…

Submitted by devops_kid· Apr 18, 2026Configuring access within a cloud solution environment

Question

You want to update your existing VPC Service Controls perimeter with a new access level. You need to avoid breaking the existing perimeter with this change, and ensure the least disruptions to users while minimizing overhead. What should you do?

Options

  • ACreate an exact replica of your existing perimeter. Add your new access level to the replica.
  • BUpdate your perimeter with a new access level that never matches. Update the new access level
  • CEnable the dry run mode on your perimeter. Add your new access level to the perimeter
  • DEnable the dry run mode on your perimeter. Add your new access level to the perimeter dry run

How the community answered

(54 responses)
  • A
    4% (2)
  • B
    13% (7)
  • C
    6% (3)
  • D
    78% (42)

Explanation

https://cloud.google.com/vpc-service-controls/docs/dry-run-mode When using VPC Service Controls, it can be difficult to determine the impact to your environment when a service perimeter is created or modified. With dry run mode, you can better understand the impact of enabling VPC Service Controls and changes to perimeters in existing environments.

Topics

#VPC Service Controls#Perimeter Management#Access Levels#Dry Run Testing

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice