PROFESSIONAL-CLOUD-DEVELOPER · Question #52
Your organization develops and tests multiple applications on Compute Engine virtual machine instances across 3 environments; Test, Staging, and Production. The separate development teams for each app
The correct answer is D. Create one project per environment per application. Group each application team member into a. A is not correct because each team requires permissions to just their application. B is not correct because each team requires permissions to just their application. C is not correct because adding individual users as members in an IAM policy can become difficult to manage over t
Question
Your organization develops and tests multiple applications on Compute Engine virtual machine instances across 3 environments; Test, Staging, and Production. The separate development teams for each application require minimal access to Production but broad access in Test and Staging. You need to design the Resource Manager structure to support your organization in following least-privilege best practices. What should you do?
Options
- ACreate one project per environment. Assign the application team members an Identity Access
- BCreate one project per environment. Group each application team member into a Google Group.
- CCreate one project per environment per application. Assign the application team members an
- DCreate one project per environment per application. Group each application team member into a
How the community answered
(34 responses)- B12% (4)
- C6% (2)
- D82% (28)
Explanation
A is not correct because each team requires permissions to just their application. B is not correct because each team requires permissions to just their application. C is not correct because adding individual users as members in an IAM policy can become difficult to manage over time. D is correct because a project provides good isolation for each application team, and managing membership via a group is easier to maintain over time. https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations
Topics
Community Discussion
No community discussion yet for this question.