Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Google Cloud Certified Professional Cloud Security Engineer · Google Cloud
Select 2 answers.
This question asks for 2 answers, but our data marks only 1. Compare with the community discussion below for the full answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
AE A. Configuring Private Google Access on the Compute Engine subnet: This feature enables instances without public IP addresses to connect to Google APIs and services over internal IP addresses, ensuring that the instances cannot be accessed from the internet. E. Configuring a Cloud NAT gateway: This ensures that instances within the VPC can connect to the internet, but only to specific IP ranges and ports and it also ensures that the instances cannot initiate connection to the internet. By configuring both options, you are providing your Compute Engine instances with a way to access Google services while also being isolated from the internet and that is the best way to ensure that this workload will not be able to access, or be accessed from, the internet.
AB, A to access the cloud storage privately
BE. no public ip in vm and nat to access the cloud storage