An organization recently began using App Engine to build and host its new web application for its customers. The organization wants to use its existing IAM setup to allow its developer employees to…

Question

Options

• ASynchronize the organization's Active Directory using Cloud Identity for employee access via
• BDisable access for non-developer employees by removing their Google Group from the
• CSet up Cloud Identity-Aware Proxy (Cloud IAP) to manage authentication and different
• DSet up Virtual Private Cloud (VPC) firewall rules to manage authentication and different

• A
  6% (3)
• B
  8% (4)
• C
  71% (35)
• D
  14% (7)

Explanation

A is not correct because synchronizing your users to Google Identity does not grant any differentiated access to an app engine application. B is not correct because app engine IAM roles only specify different levels of administrative access to app engine applications in a project. C is correct because Cloud IAP allows the organization to establish different levels of access based on user criteria for app engine apps. D is not correct because VPC firewall rules do not grant different levels of authorization and only allow/block traffic. https://cloud.google.com/appengine/docs/standard/python/access-control https://cloud.google.com/iap/docs/concepts-overview

No community discussion yet for this question.