PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #196
PROFESSIONAL-CLOUD-SECURITY-ENGINEER Question #196: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to reveal the answer and full explanation for question #196. The question stem and answer options stay visible for context.
Question
You need to enforce a security policy in your Google Cloud organization that prevents users from exposing objects in their buckets externally. There are currently no buckets in your organization. Which solution should you implement proactively to achieve this goal with the least operational overhead?
Options
- ACreate an hourly cron job to run a Cloud Function that finds public buckets and makes them
- BEnable the constraints/storage.publicAccessPrevention constraint at the organization level.
- CEnable the constraints/storage.uniformBucketLevelAccess constraint at the organization level.
- DCreate a VPC Service Controls perimeter that protects the storage.googleapis.com service in
Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-SECURITY-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.