Google Cloud Professional Cloud Security Engineer Practice Exam

Which method is recommended for managing access to resources across projects?

1. Create IAM roles for each resource

2. Enable organization-wide policies for resource access

3. Utilize VPC Service Controls for perimeter management

4. Depend on predefined roles without modification

The correct answer is: Utilize VPC Service Controls for perimeter management

Utilizing VPC Service Controls for perimeter management is the recommended method for managing access to resources across projects. VPC Service Controls provide a security boundary that helps prevent data exfiltration and unauthorized access to services and resources within a Google Cloud organization. By defining service perimeters, you can enforce access policies that restrict which services can communicate with each other across different projects. This ensures that sensitive data is safeguarded and only accessible by authorized users or systems, enhancing overall security. In contrast, creating IAM roles for each resource focuses on specific permissions at a granular level but may not provide the broader security posture needed for cross-project resource management. Enabling organization-wide policies offers a centralized approach to access management but may lack the specific targeting and control that VPC Service Controls provide. Depending on predefined roles can lead to insufficient flexibility and may not cater to the unique access needs of an organization, making it less suitable for comprehensive security in multi-project environments.