nerdexam
GoogleGoogle

PROFESSIONAL-DATA-ENGINEER · Question #308

PROFESSIONAL-DATA-ENGINEER Question #308: Real Exam Question with Answer & Explanation

Sign in or unlock PROFESSIONAL-DATA-ENGINEER to reveal the answer and full explanation for question #308. The question stem and answer options stay visible for context.

Submitted by wei.xz· Mar 30, 2026Designing data processing systems

Question

Your organization has two Google Cloud projects, project A and project B. In project A, you have a Pub/Sub topic that receives data from confidential sources. Only the resources in project A should be able to access the data in that topic. You want to ensure that project B and any future project cannot access data in the project A topic. What should you do?

Options

  • AAdd firewall rules in project A so only traffic from the VPC in project A is permitted.
  • BConfigure VPC Service Controls in the organization with a perimeter around project A.
  • CUse Identity and Access Management conditions to ensure that only users and service accounts in project A. can access resources in project A.
  • DConfigure VPC Service Controls in the organization with a perimeter around the VPC of project A.

Unlock PROFESSIONAL-DATA-ENGINEER to see the answer

You've previewed enough free PROFESSIONAL-DATA-ENGINEER questions. Unlock PROFESSIONAL-DATA-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#VPC Service Controls#Data Exfiltration Prevention#Pub/Sub Security#Cross-Project Security
Full PROFESSIONAL-DATA-ENGINEER PracticeBrowse All PROFESSIONAL-DATA-ENGINEER Questions