Google Professional Machine Learning Engineer Question 156
Select 3Google Cloud PlatformYou are tasked with setting up a Vertex AI Workbench environment for a sensitive machine learning project that requires strict adherence to security best practices. Which of the following actions should you take to ensure the security of the environment?
- A
Enable private IPs and disable public IPs for the Vertex AI Workbench instance.
- B
Use a custom service account with the least privilege required for Vertex AI Workbench operations.
- C
Allow all users in your organization to have access to the Vertex AI Workbench instance to streamline collaboration.
- D
Enable customer-managed encryption keys (CMEK) for data stored in Vertex AI Workbench.
- E
Store credentials and API keys in plain text files on the Vertex AI Workbench instance for easier access.
Show answer and explanation
Correct answers: A, B, D
Explanation
Applying security best practices in Vertex AI Workbench involves minimizing external exposure, enforcing the principle of least privilege, securely encrypting sensitive data, and avoiding insecure storage of credentials. These measures help protect your environment and data from unauthorized access and potential breaches.
- A. Correct.
Enabling private IPs and disabling public IPs helps minimize exposure to the public internet, reducing the risk of unauthorized access.
- B. Correct.
Using a custom service account with the least privilege ensures that the Vertex AI Workbench instance only has access to resources it needs, following the principle of least privilege.
- C. Incorrect.
Allowing all users in the organization to access the Vertex AI Workbench instance is not a security best practice, as it increases the risk of unauthorized or unintentional access.
- D. Correct.
Enabling customer-managed encryption keys (CMEK) allows you to have control over the encryption of your data, which is a key security measure for sensitive projects.
- E. Incorrect.
Storing credentials and API keys in plain text files is a security risk and should be avoided. Instead, use secure methods like Secret Manager for managing sensitive information.