Google Professional Cloud Security Engineer Question 141
Select 3Google Cloud PlatformYour organization uses Google Cloud and wants to restrict access to specific resources based on the geographic location of the user and the device's security posture. You are tasked with configuring Access Context Manager to implement this policy. Which steps should you take to ensure the policy is applied correctly?
- A
Create an access level in Access Context Manager and define conditions for geographic location and device security posture.
- B
Assign the access level to the required Google Cloud resources via an organization policy.
- C
Enable the Access Approval feature to enforce the access level conditions.
- D
Define a VPC Service Controls perimeter and attach the access level to it.
- E
Test the access level by simulating access from different locations and devices.
Show answer and explanation
Correct answers: A, D, E
Explanation
To restrict access based on geographic location and device security posture, you must create an access level in Access Context Manager with the relevant conditions, integrate it into a VPC Service Controls perimeter, and test the configuration. Assigning access levels directly via organization policies or enabling unrelated features like Access Approval will not achieve the desired outcome.
- A. Correct.
Creating an access level and defining the required conditions is the first step in configuring Access Context Manager. This is essential to set the rules for access control.
- B. Incorrect.
Access levels are not assigned using organization policies. Instead, they are attached to specific resources or used in conjunction with VPC Service Controls.
- C. Incorrect.
Access Approval is unrelated to Access Context Manager. It is used to approve sensitive actions manually and does not enforce access levels.
- D. Correct.
Defining a VPC Service Controls perimeter and attaching the access level ensures that access to resources is restricted based on the defined conditions in the access level.
- E. Correct.
Testing the access level is a critical step to ensure that the policy works as intended before full deployment.