Build a scalable internal web app for Google Workspace users using cloud-native, low-management options. How should you deploy and authenticate access? (Choose two.)

Deploying to Cloud Run is ideal for scalable, low-management web applications. Cloud Run automatically scales based on traffic, eliminating server management. Containerizing the application ensures portability and consistent deployment. Identity-Aware Proxy (IAP) provides secure, context-aware access to web applications running on Google Cloud, leveraging existing Google Workspace identities. Granting the roles/iap.httpsResourceAccessor role allows users to access web applications protected by IAP. Creating a Compute Engine VM requires manual server management and scaling, which is not low-management. A Cloud SQL users table with password hashes is a custom authentication solution, which is less secure and more complex to manage than leveraging Google Workspace identities with IAP. The roles/iap.tunnelResourceAccessor role is for TCP forwarding through IAP, not for accessing HTTPS web applications.