Google Professional Machine Learning Engineer Question 154
Select 3Google Cloud PlatformYou are a Machine Learning Engineer tasked with setting up a secure environment for your data scientists who will use Vertex AI Workbench for model development. Which of the following actions should you take to ensure security best practices are implemented?
- A
Enable Private IPs for the Vertex AI Workbench instances to restrict public internet access.
- B
Grant all users the Vertex AI Admin IAM role to simplify access management.
- C
Use a customer-managed encryption key (CMEK) to encrypt data at rest in Vertex AI Workbench.
- D
Enable VPC Service Controls to define a security perimeter around Vertex AI resources.
- E
Disable logging and monitoring to reduce resource usage and costs.
Show answer and explanation
Correct answers: A, C, D
Explanation
To apply security best practices in Vertex AI Workbench, you should ensure restricted access to your resources (e.g., using Private IPs and VPC Service Controls), enforce encryption for data at rest (e.g., using CMEK), and maintain visibility into activities (e.g., by not disabling logging). These measures collectively enhance the security posture of your Vertex AI Workbench environment.
- A. Correct.
Enabling Private IPs ensures that the Vertex AI Workbench instances do not have public IPs, reducing the exposure to potential attacks over the public internet.
- B. Incorrect.
Granting all users the Vertex AI Admin IAM role is not a security best practice, as it violates the principle of least privilege by giving excessive permissions.
- C. Correct.
Using a customer-managed encryption key (CMEK) provides enhanced control over the encryption keys used to secure data at rest, adhering to security best practices.
- D. Correct.
Enabling VPC Service Controls helps define a security perimeter around Vertex AI resources, preventing unauthorized data exfiltration and ensuring compliance with organizational security policies.
- E. Incorrect.
Disabling logging and monitoring is not a security best practice; it reduces the ability to detect and respond to security incidents effectively.