PROFESSIONAL-CLOUD-SECURITY-ENGINEER Question #324: Real Exam Question with Answer & Explanation

Question

You are managing a Google Cloud environment that is organized into folders that represent different teams. These teams need the flexibility to modify organization policies relevant to their work. You want to grant the teams the necessary permissions while upholding Google- recommended security practices and minimizing administrative complexity. What should you do?

Options

• ACreate a custom IAM role with the organization policy administrator permission and grant the
• BAssign the organization policy administrator role to a central service account and provide teams
• CCreate an organization-level tag. Attach the tag to relevant folders. Use an IAM condition to
• DGrant each team the organization policy administrator role at the organization level.