Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
A security team would like to improve the current access control implemented in the Google Cloud organization following Google’s recommended best practice.
Which of the following is NOT the best practice for managing access control?
A. Use network tags to annotate, group and filter resources.
B. Grant roles to a Google group instead of individual users.
C. Assign a more restrictive role to users at the organization level.
D. Grant IAM roles using principle of least privilege.
Correct Answer: A
- Option A is CORRECT. Network tags are used with firewall rules, and they are not to annotate resources. Labels are used for grouping and filtering resources.
- Option B is incorrect. Assigning roles to a group is easier to manage.
- Option C is incorrect. A more restrictive role can be overridden at a lower node in the hierarchy.
- Option D is incorrect. This involves giving users or services just enough permissions to perform their required tasks.
Reference:
Comments are closed, but trackbacks and pingbacks are open.