Which two settings must remain disabled to meet these requirements?

Your team needs to make sure that a Compute Engine instance does not have access to the internet or to any Google APIs or services.

Which two settings must remain disabled to meet these requirements? (Choose two.)
A . Public IP
B . IP Forwarding
C . Private Google Access
D . Static routes
E . IAM Network User Role

Answer: AC

Explanation:

Reference: https://cloud.google.com/vpc/docs/configure-private-google-access