
Ultimate access to all questions.
You are configuring a batch pipeline in Dataflow that processes data from Cloud Storage, transforms it, and then loads it into BigQuery. The security team has mandated that all Compute Engine instances must use internal IP addresses exclusively, without any external access. How can you deploy the batch pipeline in Dataflow while adhering to this security policy?
A
Create a VPC Service Controls perimeter that includes the VPC network, and designate Dataflow, Cloud Storage, and BigQuery as permitted services within this perimeter. Deploy Dataflow using only internal IP addresses.
B
Enable Private Google Access in the subnetwork. Deploy Dataflow using only internal IP addresses.
C
Configure firewall rules to permit access to Cloud Storage and BigQuery. Deploy Dataflow using only internal IP addresses.
D
Assign network tags to your workers to allow access to Cloud Storage and BigQuery. Deploy Dataflow using only internal IP addresses.