What should you do?

You are troubleshooting access denied errors between Compute Engine instances connected to a Shared VPC and BigQuery datasets. The datasets reside in a project protected by a VPC Service Controls perimeter.

What should you do?
A . Add the host project containing the Shared VPC to the service perimeter.
B. Add the service project where the Compute Engine instances reside to the service perimeter.
C. Create a service perimeter between the service project where the Compute Engine instances reside and the host project that contains the Shared VPC.
D. Create a perimeter bridge between the service project where the Compute Engine instances reside and the perimeter that contains the protected BigQuery datasets.

Answer: C

Explanation:

Reference: https://cloud.google.com/vpc-service-controls/docs/troubleshooting