Google Professional Cloud Developer Question 92
Select 2Google Cloud PlatformYour organization recently deployed a web-based application on Google Cloud. To secure the application, you need to ensure that only authenticated users within your organization can access the application and that potential vulnerabilities in the application are identified. Which combination of Google Cloud services should you use to achieve this?
- A
Identity-Aware Proxy (IAP)
- B
Web Security Scanner
- C
Cloud VPN
- D
Cloud Armor
- E
Cloud Key Management Service (Cloud KMS)
Show answer and explanation
Correct answers: A, B
Explanation
To secure the web-based application, you need to address both access control and vulnerability identification. Identity-Aware Proxy (IAP) enforces access policies, ensuring only authenticated users can access the application. Web Security Scanner identifies vulnerabilities in the application, such as security misconfigurations or outdated libraries. These two services together meet the security requirements stated in the scenario.
- A. Correct.
Identity-Aware Proxy (IAP) allows you to enforce identity and access policies for your application, ensuring that only authenticated users within your organization can access the app. This addresses the authentication and access control requirement.
- B. Correct.
Web Security Scanner helps identify vulnerabilities such as cross-site scripting (XSS) or outdated libraries in your web application, addressing the need for vulnerability assessment.
- C. Incorrect.
Cloud VPN is used for securely connecting on-premises networks to Google Cloud, but it does not address application access control or vulnerability scanning.
- D. Incorrect.
Cloud Armor provides protection against DDoS attacks and other malicious traffic, but it is not designed for user authentication or scanning for web application vulnerabilities.
- E. Incorrect.
Cloud Key Management Service (Cloud KMS) is used for securely managing cryptographic keys, but it does not provide authentication enforcement or vulnerability scanning.