Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam

Exam Professional Cloud Security Engineer topic 1 question 280 discussion

Actual exam question from Google's Professional Cloud Security Engineer
Question #: 280
Topic #: 1
[All Professional Cloud Security Engineer Questions]

Your organization has an application hosted in Cloud Run. You must control access to the application by using Cloud Identity-Aware Proxy (IAP) with these requirements:

• Only users from the AppDev group may have access.
• Access must be restricted to internal network IP addresses.

What should you do?

  • A. Deploy a VPN gateway and instruct the AppDev group to connect to the company network before accessing the application.
  • B. Create an access level that includes conditions for internal IP address ranges and AppDev groups. Apply this access level to the application's IAP policy.
  • C. Configure firewall rules to limit access to IAP based on the AppDev group and source IP addresses.
  • D. Configure IAP to enforce multi-factor authentication (MFA) for all users and use network intrusion detection systems (NIDS) to block unauthorized access attempts.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
yokoyan
2 months, 3 weeks ago
Selected Answer: B
I think it's B.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...