Question 244 of 318
Single answerYou run a web application on top of Cloud Run that is exposed to the internet with an Application Load Balancer. You want to ensure that only privileged users from your organization can access the application. The proposed solution must support browser access with single sign-on. What should you do?
AChange Cloud Run configuration to require authentication. Assign the role of Cloud Run Invoker to the group of privileged users.
BCreate a group of privileged users in Cloud Identity. Assign the role of Cloud Run User to the group directly on the Cloud Run service.
CChange the Ingress Control configuration of Cloud Run to internal and create firewall rules to allow only access from known IP addresses.
✓DActivate Identity-Aware Proxy (IAP) on the Application Load Balancer backend. Assign the role of IAP-secured Web App User to the group of privileged users.
✓
Correct Answer: D
Activate Identity-Aware Proxy (IAP) on the Application Load Balancer backend. Assign the role of IAP-secured Web App User to the group of privileged users.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.