Access Context Manager in GCP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Access Context Manager in Google Cloud?

Access Context Manager is a Google Cloud service that helps you define and enforce fine-grained access control policies based on the context of a request, such as device security status, IP address, or location.

beginner

What is a 'Service Perimeter' in Access Context Manager?

A Service Perimeter is a boundary that defines which Google Cloud resources can be accessed from outside the perimeter. It helps protect sensitive data by restricting access to trusted networks or users.

intermediate

How does Access Context Manager improve security compared to traditional IAM alone?

Access Context Manager adds context-aware access by considering factors like device security, IP address, and user location, not just user identity. This reduces risk by enforcing policies only when conditions are met.

intermediate

Name two types of access levels you can define in Access Context Manager.

You can define Basic Levels (based on IP, device attributes) and Custom Levels (using expressions combining multiple conditions).

beginner

What is the main benefit of using Access Context Manager for a company with remote workers?

It allows the company to enforce access rules that depend on the security status of the device or location, ensuring remote workers only access resources when their environment is secure.

What does a Service Perimeter in Access Context Manager do?

A Creates a virtual private network

B Defines a boundary to restrict access to Google Cloud resources

C Manages user passwords

D Monitors network traffic

A Service Perimeter restricts access to resources by defining a security boundary.

Which of these is NOT a factor Access Context Manager can use to control access?

A User identity

B Device security status

C IP address

D User's favorite color

Access Context Manager uses security-related context, not arbitrary personal preferences.

What type of access level allows combining multiple conditions with expressions?

A Basic Level

B Admin Level

C Custom Level

D Default Level

Custom Levels use expressions to combine multiple conditions for access control.

Why is Access Context Manager useful for remote workers?

A It enforces access only when device and location meet security policies

B It replaces VPNs

C It blocks all remote access

D It manages email accounts

It ensures remote workers access resources only under secure conditions.

Which Google Cloud service helps define context-aware access policies?

A Access Context Manager

B Cloud Storage

C BigQuery

D Cloud Functions

Access Context Manager is designed for context-aware access control.

Explain what a Service Perimeter is and how it helps protect Google Cloud resources.

Think of it like a fence around your house that only lets trusted people in.

Describe how Access Context Manager enhances security beyond traditional identity-based access control.

Imagine needing not just a key but also being in the right place and using a safe device.