🔥 40% Off Crucial Exams Memberships — Deal ends today!

12 minutes, 0 second remaining!
Crucial Exams

GCP Professional Cloud Security Engineer Practice Question

A retail enterprise is migrating its ML training workloads from self-managed GPU clusters to Vertex AI custom training. Compliance rules state that:

  • Training data and model artifacts must be encrypted with customer-managed keys.
  • No control plane or data plane traffic may traverse the public internet.
  • The ML team must not be responsible for operating-system patching.
    Which design best satisfies these requirements while taking advantage of the PaaS nature of Vertex AI?

  • Run training jobs on Confidential VMs in Compute Engine, manage guest OS patching manually, and use CMEK for the VM persistent disks only.

  • Store training data in a Cloud Storage bucket with uniform bucket-level access, rely on Google default encryption, and route Vertex AI traffic through Cloud NAT to the public endpoints.

  • Create a VPC Service Controls perimeter that includes Vertex AI and Cloud Storage, enable CMEK encryption on all Vertex AI resources, and access the Vertex AI and Cloud Storage APIs through Private Service Connect endpoints.

  • Establish a VPN from on-premises to Google Cloud and restrict Vertex AI API access by source IP firewall rules while keeping Google default encryption at rest and in transit.

GCP Professional Cloud Security Engineer
Ensuring data protection
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot