Google Professional Data Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
The Development and External teams currently hold the project viewer Identity and Access Management (IAM) role for a folder named Visualization. Your objective is to configure permissions such that the Development Team can read data from both Google Cloud Storage and BigQuery, while ensuring that the External Team's access is restricted to reading data only from BigQuery. How would you accomplish this?
A
Remove Cloud Storage IAM permissions to the External Team on the acme-raw-data project.
B
Create Virtual Private Cloud (VPC) firewall rules on the acme-raw-data project that deny all ingress traffic from the External Team CIDR range.
C
Create a VPC Service Controls perimeter containing both projects and BigQuery as a restricted API. Add the External Team users to the perimeter's Access Level.
D
Create a VPC Service Controls perimeter containing both projects and Cloud Storage as a restricted API. Add the Development Team users to the perimeter's Access Level.