nerdexam
CompTIA

CV0-002 · Question #499

A cloud administrator needs to give a new developer access to contents in a directory stored in a public cloud provider. Which of the following is the BEST way to do this?

The correct answer is A. Add the developer to the role that has access to the directory contents.. The best way to grant a new developer access to cloud directory contents is by assigning them to an existing role that has the necessary permissions.

Security

Question

A cloud administrator needs to give a new developer access to contents in a directory stored in a public cloud provider. Which of the following is the BEST way to do this?

Options

  • AAdd the developer to the role that has access to the directory contents.
  • BCreate a folder for the developer in the public cloud and copy the content to this folder.
  • CCopy the contents of the folder to the developer's local computer.
  • DTemporarily give the administrator's credentials and reset the password.

How the community answered

(26 responses)
  • A
    77% (20)
  • B
    4% (1)
  • C
    4% (1)
  • D
    15% (4)

Why each option

The best way to grant a new developer access to cloud directory contents is by assigning them to an existing role that has the necessary permissions.

AAdd the developer to the role that has access to the directory contents.Correct

Adding the developer to an appropriate role leverages Role-Based Access Control (RBAC), which is the standard, secure, and scalable method in public cloud providers for managing permissions according to the principle of least privilege, ensuring the developer receives only the required access.

BCreate a folder for the developer in the public cloud and copy the content to this folder.

Creating a new folder and copying content duplicates data, leading to storage inefficiency, data sprawl, and potential consistency issues.

CCopy the contents of the folder to the developer's local computer.

Copying content to a local computer creates unmanaged copies, poses security risks, and does not provide continuous access to the live cloud directory.

DTemporarily give the administrator's credentials and reset the password.

Temporarily giving administrator credentials is a severe security breach that violates the principle of least privilege and introduces significant risk.

Concept tested: Cloud Identity and Access Management (IAM) best practices

Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview

Topics

#IAM#Role-based access control#Least privilege#Public cloud security

Community Discussion

No community discussion yet for this question.

Full CV0-002 Practice