Your CISO wants to ensure that no developer can create a VM with an external public IP address, and that all resources are created only in the 'europe-west1' region. Which TWO Organization Policies should you enforce? (Select TWO)

Answer options:

constraints/compute.vmExternalIpAccess

constraints/gcp.resourceLocations

constraints/compute.disableInternetNetworkEndpointGroup

IAM role roles/compute.networkAdmin

VPC Firewall rules blocking port 80/443

How to approach this question

Identify the correct Organization Policy constraints.

Full Answer

Organization Policies provide centralized control. 'vmExternalIpAccess' prevents public IP assignment, and 'resourceLocations' restricts deployments to specific regions.

Common mistakes

Trying to use IAM or Firewalls to enforce resource creation rules.

Question 43 All questions Question 45

Practice the full GCP Professional Cloud Architect Practice Exam 2

50 questions · hints · full answers · grading

More questions from this exam

Q01CASE STUDY: TechStream Gaming. 500 emp, $100M rev. On-prem US/EU, 200 servers, MySQL 5TB. 2M peak...Medium Q02CASE STUDY: TechStream Gaming. 500 emp, $100M rev. On-prem US/EU, 200 servers, MySQL 5TB. 2M peak...Medium Q03CASE STUDY: TechStream Gaming. 500 emp, $100M rev. On-prem US/EU, 200 servers, MySQL 5TB. 2M peak...Hard Q04CASE STUDY: TechStream Gaming. 500 emp, $100M rev. On-prem US/EU, 200 servers, MySQL 5TB. 2M peak...Medium Q05CASE STUDY: TechStream Gaming. 500 emp, $100M rev. On-prem US/EU, 200 servers, MySQL 5TB. 2M peak...Easy

View all 50 questions →