Google Professional Cloud Network Engineer Question 594
Single answerGoogle Cloud PlatformYour organization requires all Cloud NAT configurations across projects to use manual IP address allocation for greater control over NAT IPs. As a Google Cloud Network Engineer, you need to enforce this policy at the organization level. Which organization policy constraint should you configure to achieve this?
- A
constraints/compute.requireNatIPManualAllocation
- B
constraints/compute.disableExternalIp
- C
constraints/compute.vmExternalIpAccess
- D
constraints/compute.requireSubnetForIP
Show answer and explanation
Correct answer: A
Explanation
To enforce that all Cloud NAT configurations in the organization use manual IP address allocation, you must configure the organization policy constraint 'constraints/compute.requireNatIPManualAllocation'. This ensures compliance with the organization's requirement for greater control over NAT IPs.
- A. Correct.
This is the correct constraint to enforce manual IP address allocation for Cloud NAT configurations. It ensures that all Cloud NAT resources within the organization use manual IP allocation.
- B. Incorrect.
This constraint disables the use of external IP addresses on resources like VMs but is unrelated to Cloud NAT IP address allocation.
- C. Incorrect.
This constraint controls whether VMs in the organization are allowed to use external IP addresses but does not apply to Cloud NAT configurations.
- D. Incorrect.
This constraint ensures that IPs are associated with a subnet, but it does not enforce manual IP allocation for Cloud NAT.