Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 243

Question

An administrative application is running on a virtual machine (VM) in a managed group at port 5601 inside a Virtual Private Cloud (VPC) instance without access to the internet currently. You want to expose the web interface at port 5601 to users and enforce authentication and authorization Google credentials. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Configure an HTTP Load Balancing instance that points to the managed group with Identity-Aware Proxy (IAP) protection with Google credentials. Modify the VPC firewall to allow access from IAP network range. A load balancer distributes traffic across healthy backends in multiple zones for availability and scale. A VPC provides a global, software-defined private network for your Google Cloud resources. Identity-Aware Proxy enforces per-request access control to apps without a VPN.

Google Cloud Professional Cloud Security Engineer PCSE — Question 243