Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 21 of 107
Free Preview · 107 of 355 · questions 1–107 of 355 are free. Sign up free to sync your progress across devices.
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
With Compute Engine and GKE you can manage VPC firewall rules. App Engine, Cloud Functions and Cloud Storage you do not manage firewall rules
>> The official reference URLs https://docs.cloud.google.com/architecture/pci-dss-compliance-in-gcp ** Correct Answers are C and D **
The correct answer i C and D - I checked that both in Gemini and ChatGPT. Why? It is because in Compute Engine and GKE it is you who manage VPC Firewall rules and it is not compensating control - it is a normal feature you manage. In App Engine and Cloud Functions you do not manage VPC firewall rules and these services are by default open to the Internet (public). If you want to make it more secure, you need to implement non-default solutions like VPC Connector or Cloud Armor and since they are not part of a default configuration, they are compensating controls.