QuestionQ177
Configuring accessYour organization is adopting a Zero Trust security model and using Chrome Enterprise Premium. The company wants to govern access to sensitive data stored in Cloud Storage. You must configure access controls so that only authorized users on managed devices can access this data, regardless of network location. Access must be limited according to the device's security posture, including current operating-system patches and antivirus software.
What should you do?
- A Grant access to specific users to the VPC Service Controls to create a perimeter to access the Cloud Storage buckets. Configure Identity-Aware Proxy (IAP) to authenticate users before they can access the data.
- B Configure IAM conditions based on IP address ranges. Require users to connect through a VPN. Implement endpoint verification software on user devices to check for basic compliance.
- C Create an access level in Access Context Manager that requires a device policy. Create a Context-Aware Access policy using this access level. Apply the policy to the VPC Service Controls perimeter that includes the Cloud Storage buckets.
- D Use Cloud Firewall rules to restrict access to the Cloud Storage buckets based on the source IP addresses. Require users to authenticate with a multi-factor authentication method.
Community Discussion