Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 119

Question

You are a member of your company's security team. You have been asked to reduce your Linux bastion host external attack surface by removing all public IP addresses. Site Reliability Engineers (SREs) require access to the bastion host from public locations so they can access the internal VPC while off-site. How should you enable this access?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Implement Identity-Aware Proxy TCP forwarding for the bastion host. Identity-Aware Proxy enforces per-request access control to apps without a VPN.

Google Cloud Professional Cloud Security Engineer PCSE — Question 119