Professional Cloud ArchitectDemo

By Google · Question Mode

QuestionQ126

Designing for security and compliance

Mountkirk Games must build a repeatable, configurable method for deploying isolated application environments. Developers and testers may access each other’s environments and resources, but they must not access staging or production resources. The staging environment requires access to certain production services.

What should you do to isolate development environments from staging and production?

  • A Create a project for development and test and another for staging and production
  • B Create a network for development and test and another for staging and production
  • C Create one subnetwork for development and another for staging and production
  • D Create one project for development, a second for staging and a third for production
Explanation

In Google Cloud the project is the primary boundary for IAM and resource isolation. Putting development and test in one project lets developers and testers freely access each other's resources, while a separate project for staging and production denies them access to those environments. Because staging and production share a single project, staging can be granted access to the specific production services it needs. A separate network (B) or subnetwork (C) only isolates at the network layer, not at the IAM/resource level, and three separate projects (D) would needlessly complicate the required staging-to-production access.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!