Google Professional Cloud Network Engineer exam dumps

Google Professional Cloud Network Engineer practice question 592 of 790

Professional Cloud Network Engineer. Professional level, Google Cloud. Free question with the correct answer and a full explanation.

Google Professional Cloud Network Engineer Question 592

Single answerGoogle Cloud Platform

Your organization wants to enforce a policy that ensures Cloud NAT is used only in specific projects to meet compliance requirements. You are tasked with configuring an organization policy constraint to restrict Cloud NAT usage. Which constraint should you configure, and how should it be applied?

  1. A

    Use the constraint constraints/compute.restrictCloudNATUsage, and set it with an allowlist of permitted projects.

  2. B

    Use the constraint constraints/compute.restrictExternalIP, and set it with a denylist of prohibited projects.

  3. C

    Use the constraint constraints/compute.restrictCloudNATUsage, and set it with a denylist of prohibited projects.

  4. D

    Use the constraint constraints/compute.restrictNetworkUsage, and set it with an allowlist of permitted projects.

Show answer and explanation

Correct answer: A

Explanation

To enforce a policy restricting Cloud NAT usage to specific projects, you should use the constraints/compute.restrictCloudNATUsage organization policy constraint. By setting an allowlist of permitted projects, you ensure that only the specified projects can create or use Cloud NAT, aligning with compliance requirements. Other constraints, like those for external IPs or general network usage, do not apply to Cloud NAT.

  • A. Correct.

    This is the correct approach. The constraint constraints/compute.restrictCloudNATUsage allows you to enforce restrictions on Cloud NAT usage by specifying an allowlist of projects where it is permitted.

  • B. Incorrect.

    This constraint is unrelated to Cloud NAT. The constraints/compute.restrictExternalIP is used to restrict external IP addresses, not Cloud NAT usage.

  • C. Incorrect.

    While the constraint constraints/compute.restrictCloudNATUsage is correct, using a denylist is not the correct method here, as it is better practice to use an allowlist for stricter compliance enforcement.

  • D. Incorrect.

    The constraints/compute.restrictNetworkUsage is unrelated to Cloud NAT and is used to restrict access to specific networks, not Cloud NAT.

Timed practice exam

Take a Google Professional Cloud Network Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Professional Cloud Network Engineer practice questions

  1. 593.Your organization requires all Cloud NAT configurations to use specific IP ranges for external NAT...
  2. 594.Your organization requires all Cloud NAT configurations across projects to use manual IP address...
  3. 595.You are tasked with configuring Private NAT for a Google Cloud project to enable private instances...
  4. 596.You are tasked with setting up a Private NAT configuration for workloads in a private subnet of...
  5. 597.You are tasked with configuring Private NAT on Google Cloud to allow Compute Engine instances in a...
Back to the Google Professional Cloud Network Engineer exam dumps