What is the most effective and efficient way to satisfy this requirement?

Your organization needs to restrict access to a Cloud Storage bucket. Only employees who are based in Canada should be allowed to view the contents.

What is the most effective and efficient way to satisfy this requirement?
A . Deploy the Cloud Storage bucket to a Google Cloud region in Canada
B . Configure Google Cloud Armor to allow access to the bucket only from IP addresses based in Canada
C . Give each employee who is based in Canada access to the bucket
D . Create a group consisting of all Canada-based employees, and give the group access to the bucket

View Answer

Answer: D

Explanation:

Reference: https://cloud.google.com/storage/docs/access-control

Because you can use your own private VPN to access the Canada-only bucket from anywhere in the world.