Exam Professional Cloud Security Engineer topic 1 question 266 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 266
Topic #: 1

[All Professional Cloud Security Engineer Questions]

Your organization is migrating a complex application to Google Cloud. The application has multiple internal components that interact with each other across several Google Cloud projects. Security is a major concern, and you must design an authorization scheme for administrators that aligns with the principles of least privilege and separation of duties. What should you do?

A. Identify the users who will migrate the application, revoke the default user roles and assign the users with purposely created custom roles.
B. Use multiple external identity providers (IdP) configured to use different SAML profiles and federate the IdPs for each application component.
C. Configure multi-factor authentication (MFA) to enforce the use of physical tokens for all users who will migrate the application.
D. No action needed. When a Google Cloud organization is created, the appropriate permissions are automatically assigned to all users in the domain.

Show Suggested Answer

Suggested Answer: A 🗳️

by yokoyan at Sept. 6, 2024, 1:32 a.m.

Comments

Submit Cancel

KLei

5 months, 2 weeks ago

Selected Answer: A

revoke default role and create custom roles with least privilege

upvoted 1 times

...

BondleB

5 months, 3 weeks ago

Selected Answer: A

upvoted 1 times

...

Exam Professional Cloud Security Engineer All Questions

View all questions & answers for the Professional Cloud Security Engineer exam

Exam Professional Cloud Security Engineer topic 1 question 266 discussion

Comments

KLei

BondleB

SY0-701