MENU
You are developing a web application that contains private images and videos stored in a Cloud Storage bucket. Your users are anonymous and do not have Google Accounts. You want to use your application-specific logic to control access to the images and videos. How should you configure access?
Suggested Answer: C
Get Premium Professional Cloud Developer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
38 comments · newest first
NO
Noble
11 months ago
B is risky, granting allUsers access could lead to leaks.
MI
Mitsue
11 months ago
A is too complicated for this scenario, just keep it simple!
TY
Ty
11 months ago
Wait, can you really use signed URLs for anonymous users?
SA
Sang
11 months ago
I disagree, I think C is more robust with IAP.
AN
Antonio
12 months ago
Option D seems like the best choice for secure access.
ME
Melda
12 months ago
I vaguely recall something about caching IP addresses with Google Cloud Armor, but I don't think that's the right approach here. Option A seems off to me.
RO
Rochell
1 year ago
I feel like we practiced a similar question where we used Identity-Aware Proxy. Option C sounds familiar, but I'm not confident if it fits this scenario.
EU
Eugene
1 year ago
I'm not entirely sure, but I think granting the Storage Object Viewer role to allUsers in option B could expose the content too much.
SH
Shad
1 year ago
I remember we discussed the importance of keeping private content secure, so I think option D with signed URLs might be the best choice.
BU
Buck
1 year ago
I think option D with signed URLs sounds like the best approach to control access without relying on user accounts. I'll focus on understanding how to implement that properly.
CO
Coral
1 year ago
Hmm, I'm a bit confused by the different options. I'll need to review the details on IAP and signed URLs to understand the differences.
AL
Alecia
1 year ago
This seems like a tricky one. I'll need to think through the security implications of each approach carefully.
CH
Charisse
1 year ago
Option C with IAP seems like the most robust solution, but I'm not as familiar with that service. I'll need to research how to set it up for this use case.
RE
Reyes
1 year ago
I'm a little confused by the wording of the options. I know DIACAP is related to information system security, but I'm not sure I fully understand the concept of residual risk. I'll have to review my notes before answering this.
MA
Maile
1 year ago
Option C with IAP sounds fancy, but why overcomplicate things? D gets the job done without all the extra setup.
HY
Hyman
1 year ago
True, but sometimes simplicity is key when it comes to development.
WI
Wilda
1 year ago
But option C with IAP provides an extra layer of security.
TA
Tasia
1 year ago
I agree, option D seems like the simplest solution.
RU
Rutha
1 year ago
Haha, can you imagine trying to manage a big IP table? What is this, the 90s? D is the clear winner here.
UL
Ula
1 year ago
IAP authentication would add an extra layer of security to the application.
AR
Arletta
1 year ago
Signed URLs would definitely simplify things for users.
MA
Marta
1 year ago
Yeah, D seems like the most efficient option for controlling access.
RO
Rory
1 year ago
I agree, managing a big IP table sounds like a nightmare.
MO
Mona
1 year ago
I was thinking B might work, but requiring users to authenticate through the app first is a good call. Signed URLs are the way to go.
MA
Mattie
1 year ago
D) Generate a signed URL that grants read access to the bucket. Allow users to access the URL after authenticating through your web application.
RO
Ronald
1 year ago
B) Grant the Storage Object Viewer IAM role to allUsers. Allow users to access the bucket after authenticating through your web application.
DE
Desire
1 year ago
I agree, D seems the most straightforward approach. Keeping the authorization logic in our application makes it easier to manage and scale.
LI
Lillian
1 year ago
I agree, D seems the most straightforward approach. Keeping the authorization logic in our application makes it easier to manage and scale.
GR
Gretchen
1 year ago
C) Configure Identity-Aware Proxy (IAP) to authenticate users into the web application. Allow users to access the bucket after authenticating through IAP.
GA
Galen
1 year ago
D) Generate a signed URL that grants read access to the bucket. Allow users to access the URL after authenticating through your web application.
NA
Natalie
2 years ago
Option D looks like the best choice here. Generating a signed URL for the bucket allows us to control access without relying on Google Accounts or IP address caching.
KA
Kanisha
1 year ago
Option D does seem like a good choice. It provides a secure way to grant access to the bucket.
JO
Josphine
1 year ago
I'm not sure, I think option C with Identity-Aware Proxy could also be a good choice for authentication.
BI
Billye
1 year ago
Yeah, I agree. Using a signed URL seems like a secure way to manage access to the images and videos.
VA
Valda
1 year ago
I think option D is the way to go. It gives us control over access without needing Google Accounts.
KA
Kate
2 years ago
I'm not sure about option D. I think option C with Identity-Aware Proxy could also be a good solution for controlling access.
LO
Long
2 years ago
I agree with Hermila. Option D provides a secure way to grant access to the private images and videos.
HE
Hermila
2 years ago
I think option D is the best choice. It allows us to control access using our application-specific logic.