An organization wants to ensure that no developer can create a VM with a public IP address. How can they enforce this at the organization level?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Organization Policy constraint 'Define allowed external IPs for VM instances' set to none

The 'Define allowed external IPs for VM instances' organization policy constraint can restrict external IP assignments to specific VMs or block them entirely....

๐Ÿ“‹Part of Professional Cloud Architect ยท GCP Certification Practice
Real Exam ScenarioCloud IAM

An organization wants to ensure that no developer can create a VM with a public IP address. How can they enforce this at the organization level?

โœ“ Correct Answer & ExplanationCloud IAM

Correct Answer

Organization Policy constraint 'Define allowed external IPs for VM instances' set to none

Why This Answer Is Correct

The 'Define allowed external IPs for VM instances' organization policy constraint can restrict external IP assignments to specific VMs or block them entirely.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Cloud IAM โ€” a core concept tested in Professional Cloud Architect. Understanding Cloud IAM is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.