What is the most effective and efficient way to satisfy this requirement?

Your organization needs to restrict access to a Cloud Storage bucket. Only employees who are based in Canada should be allowed to view the contents.

What is the most effective and efficient way to satisfy this requirement?
A . Deploy the Cloud Storage bucket to a Google Cloud region in Canada
B. Configure Google Cloud Armor to allow access to the bucket only from IP addresses based in Canada
C. Give each employee who is based in Canada access to the bucket
D. Create a group consisting of all Canada-based employees, and give the group access to the bucket

View Answer

Answer: D

Explanation:

Reference: https://cloud.google.com/storage/docs/access-control

Because you can use your own private VPN to access the Canada-only bucket from anywhere in the world.