Question 278 of 318
Single answerYour organization has an application hosted in Cloud Run. You must control access to the application by using Cloud Identity-Aware Proxy (IAP) with these requirements:
• Only users from the AppDev group may have access.
• Access must be restricted to internal network IP addresses.
What should you do?
• Only users from the AppDev group may have access.
• Access must be restricted to internal network IP addresses.
What should you do?
ADeploy a VPN gateway and instruct the AppDev group to connect to the company network before accessing the application.
✓BCreate an access level that includes conditions for internal IP address ranges and AppDev groups. Apply this access level to the application's IAP policy.
CConfigure firewall rules to limit access to IAP based on the AppDev group and source IP addresses.
DConfigure IAP to enforce multi-factor authentication (MFA) for all users and use network intrusion detection systems (NIDS) to block unauthorized access attempts.
✓
Correct Answer: B
Create an access level that includes conditions for internal IP address ranges and AppDev groups. Apply this access level to the application's IAP policy.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.