nerdexam
CompTIA

CV0-002 · Question #318

Ann, the lead product developer for a company, just hired three new developers. Ann asked the cloud administrator to give these developers access to the fileshares in the public cloud environment. Whi

The correct answer is D. Create a new role to access the fileshares and assign the three new developers.. To securely and efficiently grant fileshare access to new developers, the cloud administrator should implement an access control model based on roles with specific permissions.

Security

Question

Ann, the lead product developer for a company, just hired three new developers. Ann asked the cloud administrator to give these developers access to the fileshares in the public cloud environment. Which of the following is the BEST approach for the cloud administrator to take?

Options

  • AClone Ann's account to create three new developer accounts.
  • BDistribute the credentials of Ann's shared account to the three new developers.
  • CCopy the fileshares to each new developer's laptop.
  • DCreate a new role to access the fileshares and assign the three new developers.

How the community answered

(36 responses)
  • A
    3% (1)
  • C
    3% (1)
  • D
    94% (34)

Why each option

To securely and efficiently grant fileshare access to new developers, the cloud administrator should implement an access control model based on roles with specific permissions.

AClone Ann's account to create three new developer accounts.

Cloning Ann's account is insecure because it grants potentially excessive permissions to the new developers, violating the principle of least privilege, and makes individual accountability difficult.

BDistribute the credentials of Ann's shared account to the three new developers.

Distributing Ann's credentials is a severe security breach that compromises Ann's account, makes auditing impossible, and provides uncontrolled access, which is never an acceptable practice.

CCopy the fileshares to each new developer's laptop.

Copying fileshares to each new developer's laptop leads to uncontrolled data sprawl, significant security risks, version control issues, and is not a scalable or manageable solution for shared cloud resources.

DCreate a new role to access the fileshares and assign the three new developers.Correct

Creating a new role with specific permissions to access the fileshares and then assigning this role to the three new developers is the best approach. This adheres to the principle of least privilege, ensuring developers only have necessary access, and allows for centralized, auditable, and scalable access management.

Concept tested: Cloud Identity and Access Management - Roles

Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview

Topics

#Identity and Access Management#Role-Based Access Control (RBAC)#Least privilege#Cloud storage access

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice