nerdexam
Google

PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #184

You are creating a new infrastructure CI/CD pipeline to deploy hundreds of ephemeral projects in your Google Cloud organization to enable your users to interact with Google Cloud. You want to…

The correct answer is A. Enable the constraints/compute.skipDefaultNetworkCreation organization policy constraint at the. https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints - constraints/compute.skipDefaultNetworkCreation This boolean constraint skips the creation of the default network and related resources during Google Cloud Platform Project resource…

Submitted by amina.ke· Apr 18, 2026Configuring network security

Question

You are creating a new infrastructure CI/CD pipeline to deploy hundreds of ephemeral projects in your Google Cloud organization to enable your users to interact with Google Cloud. You want to restrict the use of the default networks in your organization while following Google-recommended best practices. What should you do?

Options

  • AEnable the constraints/compute.skipDefaultNetworkCreation organization policy constraint at the
  • BCreate a cron job to trigger a daily Cloud Function to automatically delete all default networks for
  • CGrant your users the IAM Owner role at the organization level. Create a VPC Service Controls
  • DOnly allow your users to use your CI/CD pipeline with a predefined set of infrastructure templates

How the community answered

(32 responses)
  • A
    78% (25)
  • B
    13% (4)
  • C
    6% (2)
  • D
    3% (1)

Explanation

https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints - constraints/compute.skipDefaultNetworkCreation This boolean constraint skips the creation of the default network and related resources during Google Cloud Platform Project resource creation where this constraint is set to True. By default, a default network and supporting resources are automatically created when creating a Project

Topics

#Organization Policies#Network Security#Infrastructure Provisioning#CI/CD

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice