CV0-002 · Question #318
Ann, the lead product developer for a company, just hired three new developers. Ann asked the cloud administrator to give these developers access to the fileshares in the public cloud environment. Whi
The correct answer is D. Create a new role to access the fileshares and assign the three new developers.. To securely and efficiently grant fileshare access to new developers, the cloud administrator should implement an access control model based on roles with specific permissions.
Question
Ann, the lead product developer for a company, just hired three new developers. Ann asked the cloud administrator to give these developers access to the fileshares in the public cloud environment. Which of the following is the BEST approach for the cloud administrator to take?
Options
- AClone Ann's account to create three new developer accounts.
- BDistribute the credentials of Ann's shared account to the three new developers.
- CCopy the fileshares to each new developer's laptop.
- DCreate a new role to access the fileshares and assign the three new developers.
How the community answered
(36 responses)- A3% (1)
- C3% (1)
- D94% (34)
Why each option
To securely and efficiently grant fileshare access to new developers, the cloud administrator should implement an access control model based on roles with specific permissions.
Cloning Ann's account is insecure because it grants potentially excessive permissions to the new developers, violating the principle of least privilege, and makes individual accountability difficult.
Distributing Ann's credentials is a severe security breach that compromises Ann's account, makes auditing impossible, and provides uncontrolled access, which is never an acceptable practice.
Copying fileshares to each new developer's laptop leads to uncontrolled data sprawl, significant security risks, version control issues, and is not a scalable or manageable solution for shared cloud resources.
Creating a new role with specific permissions to access the fileshares and then assigning this role to the three new developers is the best approach. This adheres to the principle of least privilege, ensuring developers only have necessary access, and allows for centralized, auditable, and scalable access management.
Concept tested: Cloud Identity and Access Management - Roles
Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview
Topics
Community Discussion
No community discussion yet for this question.