Google Professional Cloud Developer Question 94
Select 2Google Cloud PlatformYou are developing a web application hosted on Google Cloud and want to ensure that only authenticated users in your organization can access the application. Additionally, you want to identify and fix vulnerabilities in the application before it is deployed to production. Which combination of Google Cloud services should you use to achieve this?
- A
Identity-Aware Proxy (IAP)
- B
Web Security Scanner
- C
Cloud Armor
- D
Cloud Identity
- E
Cloud Monitoring
Show answer and explanation
Correct answers: A, B
Explanation
To meet the requirements of restricting access to authenticated users and identifying vulnerabilities in your web application, you should use Identity-Aware Proxy (IAP) and Web Security Scanner. IAP ensures only authenticated users in your organization can access the application, while Web Security Scanner helps identify and fix vulnerabilities before deployment. Other services like Cloud Armor, Cloud Identity, and Cloud Monitoring do not directly address both these requirements.
- A. Correct.
Identity-Aware Proxy (IAP) allows you to securely control access to your web applications by ensuring that only authenticated and authorized users can access them. This directly addresses the requirement of restricting access to authenticated users.
- B. Correct.
Web Security Scanner is a tool designed to identify vulnerabilities in your web applications, such as cross-site scripting (XSS) and outdated libraries. This meets the need to identify and fix vulnerabilities before deployment.
- C. Incorrect.
Cloud Armor is primarily used to protect applications from security threats like DDoS attacks and does not address the specific requirements of user authentication or vulnerability scanning.
- D. Incorrect.
Cloud Identity is used for managing user identities and ensuring secure access to resources, but it does not directly provide the functionality for restricting access to a specific application or for scanning vulnerabilities.
- E. Incorrect.
Cloud Monitoring is a tool for tracking the performance and reliability of your services, but it does not provide authentication control or vulnerability scanning capabilities.