CV0-003 · Question #318
Ann, the lead product developer for a company, just hired three new developers. Ann asked the cloud administrator to give these developers access to the fileshares in the public cloud environment…
The correct answer is D. Create a new role to access the fileshares and assign the three new developers. Role-Based Access Control (RBAC) is the cloud security best practice. Creating a dedicated role scoped specifically to fileshare access enforces least privilege - the developers get only what they need, nothing more. Assigning three individual accounts to the same role provides…
Question
Ann, the lead product developer for a company, just hired three new developers. Ann asked the cloud administrator to give these developers access to the fileshares in the public cloud environment. Which of the following is the BEST approach for the cloud administrator to take?
Options
- AClone Ann's account to create three new developer accounts.
- BDistribute the credentials of Ann's shared account to the three new developers.
- CCopy the fileshares to each new developer's laptop.
- DCreate a new role to access the fileshares and assign the three new developers.
How the community answered
(29 responses)- A3% (1)
- B3% (1)
- D93% (27)
Explanation
Role-Based Access Control (RBAC) is the cloud security best practice. Creating a dedicated role scoped specifically to fileshare access enforces least privilege - the developers get only what they need, nothing more. Assigning three individual accounts to the same role provides individual accountability and a clean audit trail. Cloning Ann's account (A) would grant her broader permissions to the new developers, violating least privilege. Sharing Ann's credentials (B) destroys individual accountability and audit integrity. Copying fileshares to laptops (C) creates data sprawl, removes centralized access control, and introduces serious data governance and security risks.
Topics
Community Discussion
No community discussion yet for this question.