MENU
Employees at your company use their personal computers to access your organization s Google Cloud console. You need to ensure that users can only access the Google Cloud console from their corporate-issued devices and verify that they have a valid enterprise certificate
What should you do?
Suggested Answer: D
Get Premium Professional Cloud Security Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
LO
Lorita
11 months ago
C is interesting, but I’m not sure it covers everything needed.
AL
Allene
11 months ago
Wait, can we really restrict access like that? Sounds tricky!
ER
Erick
11 months ago
I think D could work too, but A seems more straightforward.
TR
Trinidad
11 months ago
Totally agree, A makes the most sense!
SA
Sarah
12 months ago
A is the best option for device verification.
SH
Sherly
12 months ago
I feel like I saw a similar question where we had to restrict access based on device compliance. I think option C could be relevant, but I'm not completely confident.
LE
Leoma
1 year ago
I'm a bit confused about the difference between options C and D. They both mention verifying certificates, but I can't recall which one is more appropriate for this scenario.
IR
Irma
1 year ago
I remember practicing a question about access policies, and I feel like option D might be the best fit since it specifically mentions BeyondCorp Enterprise.
LA
Lavonne
1 year ago
I think option A sounds familiar, but I'm not entirely sure if IAM policies are the right approach for device verification.
ER
Ernie
1 year ago
I'm leaning towards option B with the VPC firewall policy and packet inspection. That seems like it could provide an additional layer of verification beyond just the IAM policy. I'll need to think through how that would work in practice.
KA
Kate
1 year ago
Hmm, I'm a bit unsure about the difference between the IAM policy and the organization policy mentioned in option C. I'll need to review those concepts to make sure I understand the nuances before deciding.
CL
Claribel
1 year ago
This seems like a straightforward IAM policy question. I'd start by looking at option A - implementing an IAM conditional policy to verify the device certificate. That sounds like the most direct way to address the requirement.
DE
Derick
1 year ago
Option D with the BeyondCorp Enterprise access policy seems interesting. I'm not as familiar with that service, but verifying the device certificate at the access level could be a robust solution. I'll make sure to research that approach.
LA
Laquita
1 year ago
Okay, let's think this through step-by-step. We need a solution that provides transactional support, duplicate detection, and unlimited message storage. Based on that, I'm leaning towards Azure Service Bus Queue and Azure Service Bus Topic as the two correct answers.
SC
Scarlet
2 years ago
I'm not sure, I think option D) Implement an Access Policy in BeyondCorp Enterprise might be a better choice. It seems more comprehensive in verifying the device certificate.
CO
Coral
2 years ago
I'm with Darnell on this one. Option B sounds like way too much work. Keep it simple, folks!
RI
Rima
2 years ago
D) Implement an Access Policy in BeyondCorp Enterprise to verify the device certificate Create an access binding with the access policy just created.
FR
Francesco
2 years ago
C) Implement an organization policy to verify the certificate from the access context.
BE
Becky
2 years ago
A) Implement an Identity and Access Management (1AM) conditional policy to verify the device certificate
ZA
Zana
2 years ago
I agree with Roxane. Option A sounds like the most secure way to ensure only corporate-issued devices can access the Google Cloud console.
RO
Roxane
2 years ago
I think we should go with option A) Implement an Identity and Access Management (1AM) conditional policy to verify the device certificate.
DA
Darnell
2 years ago
Haha, option B is a classic 'let's overcomplicate things' answer. Packet inspection? Really?
KA
Kasandra
2 years ago
Option A looks good to me. IAM conditional policies are super powerful for this kind of use case.
CH
Charlena
2 years ago
Let's make sure we set it up correctly to only allow access from corporate-issued devices.
RA
Rashad
2 years ago
I agree, it's important to verify the device certificate for security.
VE
Velda
2 years ago
That sounds like a good idea. IAM policies are really powerful for this.
HE
Herman
2 years ago
I think we should go with option A and implement an IAM conditional policy.
EV
Evangelina
2 years ago
I'd go with option C. Verifying the certificate from the access context seems like the straightforward approach.
LY
Lynelle
2 years ago
Definitely option D. BeyondCorp Enterprise is the way to go for verifying device certificates. Seems like the most comprehensive solution here.
UL
Ula
2 years ago
Yes, BeyondCorp Enterprise provides a strong security solution for ensuring that only corporate-issued devices with valid certificates can access the Google Cloud console.
CH
Charlesetta
2 years ago
I agree, option D with BeyondCorp Enterprise seems like the best choice for verifying device certificates.