Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 280

Question

Your organization has an application hosted in Cloud Run. You must control access to the application by using Cloud Identity-Aware Proxy (IAP) with these requirements: • Only users from the AppDev group may have access. • Access must be restricted to internal network IP addresses. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create an access level that includes conditions for internal IP address ranges and AppDev groups. Apply this access level to the application's IAP policy. Identity-Aware Proxy enforces per-request access control to apps without a VPN.

Google Cloud Professional Cloud Security Engineer PCSE — Question 280