Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ3

Managing operations

Your organization uses Vertex AI Workbench Instances. You must ensure that newly deployed Instances are automatically kept current and that users cannot inadvertently change operating-system settings. What should you do?

  • A Enforce the disableRootAccesa and requireAutoUpgradeSchedule organization policies for newly deployed Instances.
  • B Enable the VM Manager and ensure the corresponding Google Compute Engine instances are added.
  • C Implement a firewall rule that prevents Secure Shell access to the corresponding Google Compute Engine instances by using tags.
  • D Assign the AI Notebooks Runner and AI Notebooks Viewer roles to the users of the AI Workbench Instances.
Explanation

Enforcing the Vertex AI Workbench organization policies for automatic scheduled upgrades and disabled root access requires newly created instances to have an automatic upgrade schedule and prevents them from enabling root access. This keeps the environment updated while preventing users from altering operating-system settings with root privileges.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!