Google Professional Cloud Developer Question 117
Select 3Google Cloud PlatformYou are developing a mobile application that uses Google Cloud's Identity Platform to manage end-user authentication. The application requires support for multiple identity providers, including Google and Facebook. Additionally, you need to ensure that user sessions persist across app restarts and provide a secure way to manage user access tokens. Which of the following actions should you take to meet these requirements?
- A
Enable Google and Facebook as identity providers in the Identity Platform settings.
- B
Use Firebase Authentication SDK to handle user authentication and session persistence.
- C
Configure a Cloud Function to validate access tokens every time a user logs in.
- D
Implement Refresh Tokens using the Firebase Authentication SDK for session management.
- E
Enable Cloud Identity-Aware Proxy (IAP) to secure access to your app.
Show answer and explanation
Correct answers: A, B, D
Explanation
To meet the requirements, you need to configure the Identity Platform to support multiple identity providers, such as Google and Facebook, which can be done in the settings. Firebase Authentication SDK simplifies the integration for user authentication and session persistence. Refresh Tokens ensure secure session management across app restarts. Cloud Functions for token validation and IAP are not relevant or necessary for this use case.
- A. Correct.
Correct. To support multiple identity providers, you must enable them in the Identity Platform settings in the Google Cloud Console.
- B. Correct.
Correct. Firebase Authentication SDK is designed to integrate with Identity Platform for handling user authentication and session persistence.
- C. Incorrect.
Incorrect. While Cloud Functions can validate tokens, it is unnecessary for standard session management because Identity Platform and Firebase Authentication handle this automatically.
- D. Correct.
Correct. Refresh Tokens are used to manage session persistence securely, even across app restarts.
- E. Incorrect.
Incorrect. Cloud Identity-Aware Proxy (IAP) is used to secure access to web applications and resources, not to manage end-user authentication in mobile apps.