Correct Answer: Enable the 'Public Access Prevention' (PAP) organization policy
The 'Public Access Prevention' organization policy is a strong, centralized control that prevents any bucket in the hierarchy from being made public via IAM or ACLs....
Correct Answer
Enable the 'Public Access Prevention' (PAP) organization policy
Why This Answer Is Correct
The 'Public Access Prevention' organization policy is a strong, centralized control that prevents any bucket in the hierarchy from being made public via IAM or ACLs.
This question evaluates your knowledge of Google Cloud Storage — a core concept tested in Professional Cloud Architect. Understanding Google Cloud Storage is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
You need to grant developers read-only access to Google Cloud Storage buckets without giving them access to other services. What's the best approach using Cloud IAM?
An enterprise wants to enforce a policy that all Cloud Storage buckets created in the organization must have 'Uniform Bucket-Level Access' enabled to prevent accidental exposure of individual objects. How should they implement this?
You are migrating a 1 PB dataset of medical images to Cloud Storage. The data is currently on-premises and must be moved as quickly as possible. You have a 1 Gbps internet connection. What is the most feasible way to migrate ?
You are hosting a website on Cloud Storage. You want to use a custom domain name (e.g., www.example.com) and serve content over HTTPS. What is the architecture to achieve this?