Home › GCP Associate Cloud Engineer › cloudcomputing › gcpsecurity › Which Google Cloud feature provides a centralise…
Which Google Cloud feature provides a centralised reverse proxy that verifies the user's identity and context BEFORE allowing access to web apps and SSH/RDP sessions — useful for replacing VPNs?
ACloud Endpoints
BIdentity-Aware Proxy (IAP)
CCloud Source Repositories
DCloud Pub/Sub
Answer & Solution
Correct answer: B. Identity-Aware Proxy (IAP)
IAP enforces user/group + context-aware policies in front of apps and TCP tunnels (SSH/RDP/etc.) — the BeyondCorp Zero Trust model. Endpoints is API gateway, Pub/Sub is messaging, Source Repos is git hosting.
Related questions
Which IAM principle does Google Cloud recommend when granting a service account access to An organisation wants to enforce that only signed and approved container images can be depWorkload Identity Federation lets external (non-Google) identities (e.g. AWS IAM, GitHub AAn auditor needs to determine which user deleted a Cloud Storage bucket in a project last Which approach gives a GKE workload SHORT-LIVED credentials to access Google APIs WITHOUT Which Google Cloud product stores secrets (API tokens, passwords, certificates) with versiWhich Google Cloud service centrally manages cryptographic keys (creation, rotation, destrService account impersonation lets a principal: