Professional Cloud Network Engineer Bucket Practice Questions

You have a Cloud Storage bucket in Google Cloud project XYZ. The bucket contains sensitive data. You need to design a solution to ensure that only instances belonging to VPCs under project XYZ can access the data stored in this Cloud Storage bucket. What should you do?

• AA. Configure Private Google Access to privately access the Cloud Storage service using private IP addresses.
• BB. Configure a VPC Service Controls perimeter around project XYZ, and include storage.googleapis.com as a restricted service in the service perimeter.
• CC. Configure Cloud Storage with projectPrivate Access Control List (ACL) that gives permission to the project team based on their roles.
• DD. Configure Private Service Connect to privately access Cloud Storage from all VPCs under project XYZ.

You need to enable Cloud CDN for all the objects inside a storage bucket. You want to ensure that all the object in the storage bucket can be served by the CDN. What should you do in the GCP Console?

• AA. Create a new cloud storage bucket, and then enable Cloud CDN on it.
• BB. Create a new TCP load balancer, select the storage bucket as a backend, and then enable Cloud CDN on the backend.
• CC. Create a new SSL proxy load balancer, select the storage bucket as a backend, and then enable Cloud CDN on the backend.
• DD. Create a new HTTP load balancer, select the storage bucket as a backend, enable Cloud CDN on the backend, and make sure each object inside the storage bucket is shared publicly.