Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
Your company wants to grant Read-Only access to the contents of Cloud Storage for a limited time to a group of Auditors without authentication. You have been tasked with implementing the access management for the bucket following the principle of the least privilege.
How can you achieve this?
A. Grant the Storage Object Admin role to the allAuthenticatedUsers group on the bucket.
B. Grant the Storage Object Viewer role to the allAuthenticatedUsers group on the bucket.
C. Grant the Storage Object Admin role to the allUsers group on the bucket.
D. Create a Signed URL and share with the group.
Correct Answer: D
- Option A is incorrect. This gives Admin permissions to any Authenticated user with a Google account and is not time-limited.
- Option B is incorrect. This gives the right permissions to any Authenticated user with a Google account and is not time-limited.
- Option C is incorrect. This gives Admin permissions to all users without requiring authentication, and it is not time-limited.
- Option D is CORRECT. This gives a time-limited access to the resources to the Auditors.
References:
Comments are closed, but trackbacks and pingbacks are open.