PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #196
You need to enforce a security policy in your Google Cloud organization that prevents users from exposing objects in their buckets externally. There are currently no buckets in your organization…
The correct answer is B. Enable the constraints/storage.publicAccessPrevention constraint at the organization level. https://cloud.google.com/storage/docs/public-access-prevention Public access prevention protects Cloud Storage buckets and objects from being accidentally exposed to the public. If your bucket is contained within an organization, you can enforce public access prevention by…
Question
Options
- ACreate an hourly cron job to run a Cloud Function that finds public buckets and makes them
- BEnable the constraints/storage.publicAccessPrevention constraint at the organization level.
- CEnable the constraints/storage.uniformBucketLevelAccess constraint at the organization level.
- DCreate a VPC Service Controls perimeter that protects the storage.googleapis.com service in
How the community answered
(20 responses)- A10% (2)
- B85% (17)
- C5% (1)
Explanation
https://cloud.google.com/storage/docs/public-access-prevention Public access prevention protects Cloud Storage buckets and objects from being accidentally exposed to the public. If your bucket is contained within an organization, you can enforce public access prevention by using the organization policy constraint storage.publicAccessPrevention at the project, folder, or organization level.
Topics
Community Discussion
No community discussion yet for this question.