nerdexam
Google

PROFESSIONAL-CLOUD-DEVELOPER · Question #52

Your organization develops and tests multiple applications on Compute Engine virtual machine instances across 3 environments; Test, Staging, and Production. The separate development teams for each app

The correct answer is D. Create one project per environment per application. Group each application team member into a. A is not correct because each team requires permissions to just their application. B is not correct because each team requires permissions to just their application. C is not correct because adding individual users as members in an IAM policy can become difficult to manage over t

Implementing security for applications

Question

Your organization develops and tests multiple applications on Compute Engine virtual machine instances across 3 environments; Test, Staging, and Production. The separate development teams for each application require minimal access to Production but broad access in Test and Staging. You need to design the Resource Manager structure to support your organization in following least-privilege best practices. What should you do?

Options

  • ACreate one project per environment. Assign the application team members an Identity Access
  • BCreate one project per environment. Group each application team member into a Google Group.
  • CCreate one project per environment per application. Assign the application team members an
  • DCreate one project per environment per application. Group each application team member into a

How the community answered

(34 responses)
  • B
    12% (4)
  • C
    6% (2)
  • D
    82% (28)

Explanation

A is not correct because each team requires permissions to just their application. B is not correct because each team requires permissions to just their application. C is not correct because adding individual users as members in an IAM policy can become difficult to manage over time. D is correct because a project provides good isolation for each application team, and managing membership via a group is easier to maintain over time. https://cloud.google.com/docs/enterprise/best-practices-for-enterprise-organizations

Topics

#Resource Hierarchy#IAM#Least Privilege#Google Groups

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-DEVELOPER Practice