Staff must reach an internal app without a VPN, based on identity. What fits?
Why B is the answer
Identity-Aware Proxy
IAP checks identity and context before granting access.
In detail
- Identity-Aware Proxy gives access by identity, with no VPN.
- Access depends on identity and context.
Use case
An illustrative scenario, not a real incident.
Staff reach an internal app through Identity-Aware Proxy, with no VPN.
See it in different ways
mindmap
root((Security))
Identity
Workload Identity Federation
Impersonation
Separation of duties
Data
Customer-managed keys
VPC Service Controls
Policy
Organization level
AI
Model ArmorsequenceDiagram participant P0 as Employee participant P1 as Identity-Aware Proxy participant P2 as Internal app P0->>P1: Sign in P1->>P2: Allow if permitted P2-->>P0: Response
Key point: IAP checks identity and context.
Why the other options are wrong
- A. A larger load balancer
- Size does not check identity.
- C. A public IP with an open firewall
- That exposes the app.
- D. Cloud NAT
- NAT handles outbound traffic.