PCD Question 78

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  A. Enable Cloud Identity-Aware Proxy (IAP) on the HTTP(s) load balancer and restrict access to a Google Group containing users in the finance department. Verify the provided JSON Web Token within the application. Cloud IAP allows you to manage access to your web applications running on Compute Engine by verifying a user’s identity and determining if that user should be allowed to access the application. You can integrate Cloud IAP with Google Groups to restrict access to specific groups within your G Suite domain, such as a group for the finance department. When a user authenticates via Cloud IAP, a JSON Web Token (JWT) is issued that can be used within your application to further verify the user's identity and departmental membership.

• Chose A1

  A is correct.

• 1

  Option A is the correct solution because it uses Cloud Identity-Aware Proxy (IAP) to authenticate and authorize users to access the application. IAP verifies the identity of users accessing the application through G Suite and checks if they are members of the specified Google Group. IAP also verifies the JSON Web Token (JWT) provided in the request to ensure that the request is legitimate.