Employees at your company use their personal computers to access your organization's Google Cloud console. You need to ensure that users can only access the Google Cloud console from their…

Question

Options

• AImplement an Access Policy in BeyondCorp Enterprise to verify the device certificate. Create an
• BImplement a VPC firewall policy. Activate packet inspection and create an allow rule to validate
• CImplement an organization policy to verify the certificate from the access context.
• DImplement an Identity and Access Management (IAM) conditional policy to verify the device

• A
  76% (19)
• B
  12% (3)
• C
  4% (1)
• D
  8% (2)

Explanation

BeyondCorp Enterprise is Google's zero-trust access solution and integrates with Access Context Manager to enforce device-level policies. You can create an Access Policy with an access level that requires a valid enterprise certificate (via endpoint verification or certificate-based device trust), and then bind that access level to a VPC Service Controls perimeter or IAM Conditions to gate access to the Google Cloud console. Option B (VPC firewall with packet inspection) operates at the network layer and cannot inspect TLS certificate metadata for client device validation. Option C (organization policy) enforces resource configuration, not user device posture. Option D (IAM conditional policy) can enforce conditions like IP range or time, but does not natively validate device certificates.

No community discussion yet for this question.