[Solved] Given this Access Context Manager policy snippet, what will happen if... Given this Access Context Manager policy snippet, what will happen if a user tries to access a resource from IP 203.0.113.5? | GCP

GCP - Cloud IAM Advanced

Given this Access Context Manager policy snippet, what will happen if a user tries to access a resource from IP 203.0.113.5?

accessLevels:
- name: 'accessPolicies/456/accessLevels/levelA'
  basic:
    conditions:
    - ipSubnetworks: ['192.168.0.0/16']
      devicePolicy:
        osConstraints:
        - osType: 'DESKTOP_WINDOWS'
          minimumVersion: '10'

AAccess will be denied because the IP is outside the allowed subnet

BAccess will be allowed because device OS matches

CAccess will be allowed because IP is public

DAccess will be denied because OS version is too low

Step-by-Step Solution

Solution:

Step 1: Check IP subnet condition
The allowed IP subnet is '192.168.0.0/16', which covers private IPs only. The user's IP '203.0.113.5' is public and outside this range.
Step 2: Evaluate access decision
Since IP does not match allowed subnet, access is denied regardless of device OS.
Final Answer:
Access will be denied because the IP is outside the allowed subnet -> Option A
Quick Check:
IP outside allowed subnet = Access denied [OK]

Quick Trick: Check IP subnet first; outside means deny access [OK]

Common Mistakes:

Ignoring IP subnet and trusting device OS alone
Assuming public IPs are always allowed
Confusing IP ranges with device policies

Master "Cloud IAM Advanced" in GCP

9 interactive learning modes - each teaches the same concept differently

Learn Why Deep Visual Try Challenge Project Recall Time

More GCP Quizzes

Given this Access Context Manager policy snippet, what will happen if a user tries to access a resource from IP 203.0.113.5?

Step 1: Check IP subnet condition

Step 2: Evaluate access decision

Final Answer:

Quick Check:

Want More Practice?