A subset of regional applications require controlled internet access to specific URLs (hostnames and paths). Instances have a secure tag. How should you enforce URL-level access controls?
Choose an answer
Tap an option to check your answer.
Correct answer: Deploy a Secure Web Proxy instance in each region and apply a Secure Web Proxy policy to allow the secure-tagged machines access to URLs in a URL list..
Why this is the answer
The correct answer is to deploy a Secure Web Proxy instance in each region and apply a Secure Web Proxy policy. Secure Web Proxy (SWP) is designed for URL-level access control, allowing you to specify hostnames and paths. Deploying an instance in each region ensures low latency for regional applications. The SWP policy can then be configured to allow access to specific URLs for instances identified by their secure tag. Incorrect options: Cloud NAT with FQDN objects in firewall rules only supports filtering by fully qualified domain names, not specific URL paths, and doesn't integrate directly with instance tags for policy application. A single global Secure Web Proxy instance would introduce high latency for regional applications, making it unsuitable for performance-sensitive use cases.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed