Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 247

Question

You run a web application on top of Cloud Run that is exposed to the internet with an Application Load Balancer. You want to ensure that only privileged users from your organization can access the application. The proposed solution must support browser access with single sign-on. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Activate Identity-Aware Proxy (IAP) on the Application Load Balancer backend. Assign the role of IAP-secured Web App User to the group of privileged users. A load balancer distributes traffic across healthy backends in multiple zones for availability and scale. Identity-Aware Proxy enforces per-request access control to apps without a VPN.

Google Cloud Professional Cloud Security Engineer PCSE — Question 247