What should you do?

You want to limit the images that can be used as the source for boot disks. These images will be stored in a dedicated project.

What should you do?
A . Use the Organization Policy Service to create a compute.trustedimageProjects constraint on the organization level. List the trusted project as the whitelist in an allow operation.
B . Use the Organization Policy Service to create a compute.trustedimageProjects constraint on the organization level. List the trusted projects as the exceptions in a deny operation.
C . In Resource Manager, edit the project permissions for the trusted project. Add the organization as member with the role: Compute Image User.
D . In Resource Manager, edit the organization permissions. Add the project ID as member with the role: Compute Image User.

View Answer

Answer: A

Explanation:

https://cloud.google.com/compute/docs/images/restricting-image-access#trusted_images

Reference: https://cloud.google.com/compute/docs/images/restricting-image-access