Your organization has a centralized identity provider that is used to manage human and machine access. You want to leverage this existing identity management system to enable on-premises…

Question

Options

• AEnable Secure Web Proxy. Create a proxy subnet for each region that Secure Web Proxy will be
• BEnable Workforce Identity Federation. Create a workforce identity pool and specify the on-
• CEnable Identity-Aware Proxy (IAP). Configure IAP by specifying the groups and service accounts
• DEnable Workload Identity Federation. Create a workload identity pool and specify the on-premises

• A
  3% (1)
• B
  10% (3)
• C
  16% (5)
• D
  71% (22)

Explanation

Workload Identity Federation allows external workloads - including on-premises applications - to authenticate to Google Cloud by exchanging credentials from an existing identity provider (via OIDC, SAML 2.0, or AWS) for short-lived Google credentials. This eliminates the need for hardcoded service account keys. Workforce Identity Federation (option B) serves the same general purpose but is designed for human users (employees), not machine-to-machine workloads. IAP (option C) is for controlling human access to applications, not for enabling application-to-API authentication. Secure Web Proxy (option A) is a network egress control mechanism, unrelated to identity federation.

No community discussion yet for this question.