PROFESSIONAL-CLOUD-SECURITY-ENGINEER · Question #126
PROFESSIONAL-CLOUD-SECURITY-ENGINEER Question #126: Real Exam Question with Answer & Explanation
Sign in or unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to reveal the answer and full explanation for question #126. The question stem and answer options stay visible for context.
Question
You work for a large organization where each business unit has thousands of users. You need to delegate management of access control permissions to each business unit. You have the following requirements: - Each business unit manages access controls for their own projects. - Each business unit manages access control permissions at scale. - Business units cannot access other business units' projects. - Users lose their access if they move to a different business unit or leave the company. - Users and access control permissions are managed by the on-premises directory service. What should you do? (Choose two.)
Options
- AUse VPC Service Controls to create perimeters around each business unit's project.
- BOrganize projects in folders, and assign permissions to Google groups at the folder level.
- CGroup business units based on Organization Units (OUs) and manage permissions based on
- DCreate a project naming convention, and use Google's IAM Conditions to manage access based
- EUse Google Cloud Directory Sync to synchronize users and group memberships in Cloud Identity.
Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER to see the answer
You've previewed enough free PROFESSIONAL-CLOUD-SECURITY-ENGINEER questions. Unlock PROFESSIONAL-CLOUD-SECURITY-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.