Google Professional Cloud Developer Question 95
Select 2Google Cloud PlatformYou are developing a web application hosted on Google Cloud that processes sensitive user data. To ensure secure access to the application and protect it from unauthorized users, you want to leverage Google Cloud's built-in security mechanisms. Which combination of services should you use to protect the application and identify vulnerabilities in its configuration?
- A
Identity-Aware Proxy (IAP)
- B
Web Security Scanner
- C
Cloud NAT
- D
Cloud CDN
- E
Firewall Rules
Show answer and explanation
Correct answers: A, B
Explanation
To secure a web application in Google Cloud, you can use Identity-Aware Proxy (IAP) to enforce identity-based access controls and restrict access to authorized users only. Additionally, Web Security Scanner is a valuable tool for identifying vulnerabilities in your application, such as security misconfigurations or exploitable code, allowing you to proactively mitigate risks. While other options like Cloud NAT, Cloud CDN, and Firewall Rules are useful in specific scenarios, they do not directly address the requirements for identity-based access control and vulnerability identification.
- A. Correct.
Identity-Aware Proxy (IAP) helps secure applications by enforcing identity-based access controls, ensuring only authenticated and authorized users can access the application.
- B. Correct.
Web Security Scanner identifies vulnerabilities in your web application, such as cross-site scripting (XSS) or outdated libraries, and helps you address potential security risks.
- C. Incorrect.
Cloud NAT ensures private VM instances can access the internet without exposing them to external traffic, but it does not directly secure application access or identify vulnerabilities.
- D. Incorrect.
Cloud CDN is used to cache content at the edge for faster delivery, but it does not provide security features like vulnerability scanning or access control.
- E. Incorrect.
Firewall Rules manage network traffic to and from your resources, but they do not handle identity-based access control or vulnerability detection.