Google Professional Cloud DevOps Engineer Question 45
Select 3Google Cloud PlatformYour team is building a new application in Google Cloud and wants to enable a secure cloud-based development environment. As a DevOps engineer, you are tasked with designing this environment. Which of the following practices should you implement to ensure the development environment is secure?
- A
Use Google Cloud Workstations to provide isolated development environments with built-in security controls.
- B
Allow developers to directly access production resources for faster testing and debugging.
- C
Implement VPC Service Controls to restrict access to sensitive APIs and data.
- D
Enable Cloud Identity-Aware Proxy (Cloud IAP) for secure access to development environments.
- E
Use publicly accessible IPs for all development resources to ensure easy connectivity.
Show answer and explanation
Correct answers: A, C, D
Explanation
Enabling secure cloud development environments involves using tools and practices that isolate development resources, enforce access controls, and minimize attack surfaces. Google Cloud Workstations, VPC Service Controls, and Cloud IAP are key tools that align with these principles. Avoid practices like direct access to production or using publicly accessible IPs, as they expose systems to unnecessary security risks.
- A. Correct.
Google Cloud Workstations provide secure, managed development environments with features like isolated runtimes and built-in compliance, making them ideal for secure cloud development.
- B. Incorrect.
Allowing developers direct access to production resources increases the risk of accidental changes or breaches and violates security best practices.
- C. Correct.
VPC Service Controls enhance security by creating service perimeters that prevent unauthorized access to Google Cloud services, protecting sensitive data.
- D. Correct.
Cloud Identity-Aware Proxy (Cloud IAP) provides secure, identity-based access to applications and resources, ensuring that only authenticated users can access the development environment.
- E. Incorrect.
Using publicly accessible IPs for development resources exposes them to potential attacks and is not a secure practice.