An organization following zero-trust principles wants to allow employees to access internal GCP resources only if they are using a company-managed device with an active antivirus and are located in a specific country. Which GCP service enables this context-aware access?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: BeyondCorp Enterprise / Context-Aware Access

BeyondCorp Enterprise (built with Context-Aware Access and IAP) allows for fine-grained, identity- and context-based access control to applications and infrastructure without a tra...

๐Ÿ“‹Part of Professional Cloud Architect ยท GCP Certification Practice
Real Exam ScenarioCloud IAM

An organization following zero-trust principles wants to allow employees to access internal GCP resources only if they are using a company-managed device with an active antivirus and are located in a specific country. Which GCP service enables this context-aware access?

โœ“ Correct Answer & ExplanationCloud IAM

Correct Answer

BeyondCorp Enterprise / Context-Aware Access

Why This Answer Is Correct

BeyondCorp Enterprise (built with Context-Aware Access and IAP) allows for fine-grained, identity- and context-based access control to applications and infrastructure without a traditional VPN.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Cloud IAM โ€” a core concept tested in Professional Cloud Architect. Understanding Cloud IAM is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.