Google Professional Machine Learning Engineer Question 155
Select 4Google Cloud PlatformYou are developing a machine learning model on Vertex AI Workbench, and your organization has strict security requirements. Which of the following practices should you implement to ensure security best practices are followed?
- A
Enable private IPs and disable public IPs for your Vertex AI Workbench instance.
- B
Use service accounts with the least privilege required for your tasks.
- C
Store sensitive API keys and credentials directly in the notebook environment for easier access.
- D
Configure Identity and Access Management (IAM) roles to allow all team members full access to the Vertex AI Workbench environment.
- E
Use customer-managed encryption keys (CMEK) to encrypt data stored in Vertex AI Workbench.
- F
Regularly audit and rotate credentials used by your Vertex AI Workbench environment.
Show answer and explanation
Correct answers: A, B, E, F
Explanation
To apply security best practices in Vertex AI Workbench, it's crucial to minimize exposure to external threats, restrict access using the principle of least privilege, and secure sensitive information through encryption and proper credential management. Avoid practices like granting excessive permissions or storing sensitive data insecurely as they can lead to significant vulnerabilities.
- A. Correct.
Correct: Enabling private IPs and disabling public IPs minimizes exposure to external threats by ensuring that your Vertex AI Workbench instance is only accessible within your private network.
- B. Correct.
Correct: Using service accounts with the least privilege follows the principle of least privilege, which reduces the risk of unauthorized access or accidental misuse of permissions.
- C. Incorrect.
Incorrect: Storing sensitive API keys and credentials directly in the notebook environment is a poor security practice as it increases the risk of unintentional exposure or misuse.
- D. Incorrect.
Incorrect: Granting all team members full access violates the principle of least privilege, potentially leading to security vulnerabilities or misuse.
- E. Correct.
Correct: Using customer-managed encryption keys (CMEK) ensures that you have control over the encryption of your data, adhering to security best practices for sensitive information.
- F. Correct.
Correct: Regularly auditing and rotating credentials reduces the risk of unauthorized access from compromised or outdated credentials.