PCSE Practice Question: Configuring Access Within a Cloud Solution Environment
A security administrator needs to deploy a solution that allows a group of developers to access a web application running on Compute Engine behind an internal HTTP load balancer. The solution must enforce access based on user identity and device security status, and must not expose the application to the public internet. Which THREE components are required?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Access Context Manager (Access Levels)
Identity-Aware Proxy (IAP) provides identity and context-aware access. An internal HTTP load balancer keeps the app private. Context-aware access requires an access level (e.g., based on device policy). IAP uses access levels to enforce security.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Cloud NAT
Why it's wrong here
Cloud NAT is for outbound internet access from instances, not relevant.
- ✗
Cloud Armor
Why it's wrong here
Cloud Armor is a web application firewall, not needed for identity-based access.
- ✓
Access Context Manager (Access Levels)
Why this is correct
Access levels define device security requirements for IAP.
- ✓
Identity-Aware Proxy (IAP)
Why this is correct
IAP authenticates users and enforces access policies.
- ✓
Internal HTTP Load Balancer
Why this is correct
An internal load balancer keeps the backend private, not exposed to the internet.
Go deeper
Related to this question
About these practice questions
This PCSE question is part of Courseiva's 960-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCSE practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCSE exam.