Google Cloud Access Context Manager

• Access Context Manager allows organization administrators to define fine-grained, attribute-based access control for projects and resources
• Access Context Manager helps prevent data exfiltration
• Access Context Manager helps reduce the size of the privileged network and move to a model where endpoints do not carry ambient authority based on the network.
• Access Context Manager helps define desired rules and policy but isn’t responsible for policy enforcement. The policy is configured and enforced across various points, such as VPC Service Controls.
• Administrators define an access policy, which is an organization-wide container for access levels and service perimeters.
• Access levels are used for permitting access to resources based on contextual information about the request.
• Access is granted based on the context of the request, such as device type, user identity, and more, while still checking for corporate network access when necessary.
• Access Context Manager provides two ways to define access levels: basic and custom.
  • Basic Access level
    • is a collection of conditions that are used to test requests.
    • Conditions are a group of attributes to be tested, such as device type, IP address, or user identity.
    • Access level attributes represent contextual information about a request.
  • Custom access levels
    • are created using a subset of Common Expression Language.
    • helps to permit requests based on data from third-party services.
• Service perimeters define sandboxes of resources that can freely exchange data within the perimeter but are not allowed to export data outside of it.

GCP Certification Exam Practice Questions

• Questions are collected from Internet and the answers are marked as per my knowledge and understanding (which might differ with yours).
• GCP services are updated everyday and both the answers and questions might be outdated soon, so research accordingly.
• GCP exam questions are not updated to keep up the pace with GCP updates, so even if the underlying feature has changed the question might not be updated
• Open to further feedback, discussion and correction.

References

Google_Cloud_Access_Context_Manager