In order to meet PCI DSS requirements, a customer wants to ensure that all outbound traffic is authorized. Which two cloud offerings meet this requirement without additional compensating controls?…

The correct answer is C. Compute Engine D. Google Kubernetes Engine. App Engine ingress firewall rules are available, but egress rules are not currently available. Per requirements 1.2.1 and 1.3.4, you must ensure that all outbound traffic is authorized. SAQ A-EP and SAQ D–type merchants must provide compensating controls or use a different…

Submitted by krish.m· Apr 18, 2026Configuring network security

Question

In order to meet PCI DSS requirements, a customer wants to ensure that all outbound traffic is authorized. Which two cloud offerings meet this requirement without additional compensating controls? (Choose two.)

Options

AApp Engine
BCloud Functions
CCompute Engine
DGoogle Kubernetes Engine
ECloud Storage

How the community answered

(42 responses)

A
2% (1)
B
5% (2)
C
83% (35)
E
10% (4)

Explanation

App Engine ingress firewall rules are available, but egress rules are not currently available. Per requirements 1.2.1 and 1.3.4, you must ensure that all outbound traffic is authorized. SAQ A-EP and SAQ D–type merchants must provide compensating controls or use a different Google Cloud product. Compute Engine and GKE are the preferred alternatives. https://cloud.google.com/solutions/pci-dss-compliance-in-gcp

Topics

#Network Security#Outbound Traffic Control#PCI DSS Compliance#Firewall Rules

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice