CV0-002 · Question #499
A cloud administrator needs to give a new developer access to contents in a directory stored in a public cloud provider. Which of the following is the BEST way to do this?
The correct answer is A. Add the developer to the role that has access to the directory contents.. The best way to grant a new developer access to cloud directory contents is by assigning them to an existing role that has the necessary permissions.
Question
A cloud administrator needs to give a new developer access to contents in a directory stored in a public cloud provider. Which of the following is the BEST way to do this?
Options
- AAdd the developer to the role that has access to the directory contents.
- BCreate a folder for the developer in the public cloud and copy the content to this folder.
- CCopy the contents of the folder to the developer's local computer.
- DTemporarily give the administrator's credentials and reset the password.
How the community answered
(26 responses)- A77% (20)
- B4% (1)
- C4% (1)
- D15% (4)
Why each option
The best way to grant a new developer access to cloud directory contents is by assigning them to an existing role that has the necessary permissions.
Adding the developer to an appropriate role leverages Role-Based Access Control (RBAC), which is the standard, secure, and scalable method in public cloud providers for managing permissions according to the principle of least privilege, ensuring the developer receives only the required access.
Creating a new folder and copying content duplicates data, leading to storage inefficiency, data sprawl, and potential consistency issues.
Copying content to a local computer creates unmanaged copies, poses security risks, and does not provide continuous access to the live cloud directory.
Temporarily giving administrator credentials is a severe security breach that violates the principle of least privilege and introduces significant risk.
Concept tested: Cloud Identity and Access Management (IAM) best practices
Source: https://learn.microsoft.com/en-us/azure/role-based-access-control/overview
Topics
Community Discussion
No community discussion yet for this question.