You have sensitive data stored in Google Cloud Storage and want to enable additional layers of access control beyond basic IAM. Which feature should you use?
Choose an answer
Tap an option to check your answer.
Correct answer: VPC Service Controls.
Why this is the answer
*Explanation:* To enable additional layers of access control beyond basic IAM for sensitive data stored in Google Cloud Storage, you should use **VPC Service Controls**. VPC Service Controls provide an added layer of security by effectively isolating Google Cloud Storage from unauthorized access, enhancing the protection of your sensitive data. Other options like Bucket Policy Only (sets policies at the bucket level but doesn't provide additional layers of control), Object Lifecycle Management (deals with data retention, not access control), Predefined ACLs (do not offer an additional layer of control), and Uniform bucket-level access (controls access at the bucket level but doesn't provide additional layers) are not designed for the same purpose.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed