Professional-Cloud-Security-Engineer Exam Dumps | Your DevOps team uses Packer to build Compute Engine images by using this process: 1 Create an ephemeral

<< Prev Question Next Question >>

Question 5/124

Your DevOps team uses Packer to build Compute Engine images by using this process:
1 Create an ephemeral Compute Engine VM.
2 Copy a binary from a Cloud Storage bucket to the VM's file system.
3 Update the VM's package manager.
4 Install external packages from the internet onto the VM.
Your security team just enabled the organizational policy. consrraints/compure.vnExtemallpAccess. to restrict the usage of public IP Addresses on VMs. In response your DevOps team updated their scripts to remove public IP addresses on the Compute Engine VMs however the build pipeline is failing due to connectivity issues.
What should you do?
Choose 2 answers

A. Provision a Cloud NAT instance in the same VPC and region as the Compute Engine VM

B. Provision an HTTP load balancer with the VM in an unmanaged instance group to allow inbound connections from the internet to your VM.

C. Update the VPC routes to allow traffic to and from the internet.

D. Provision a Cloud VPN tunnel in the same VPC and region as the Compute Engine VM.

E. Enable Private Google Access on the subnet that the Compute Engine VM is deployed within.

Question 5/124

LEAVE A REPLY

Download PDF File