Exam Associate Cloud Engineer topic 1 question 25 discussion

Correct is A. As per google best practices it is recommended to use predefined roles and create groups to control access to multiple users with same responsibility

Correct answer is A as per: https://cloud.google.com/iam/docs/job-functions/auditing#scenario_external_auditors

Correct is A.

Based on best practices, A group should be created, and both auditors should be added and predefined 'logging.viewer' and 'bigQuery.dataViewer roles will be granted.

I will go A

The organization creates a Google group for these external auditors and adds the current auditor to the group. This group is monitored and is typically granted access to the dashboard application. https://cloud.google.com/iam/docs/job-functions/auditing#scenario_external_auditors

Correct Answer is A. you should add a role to the group of users instead of adding particular users in IAM

correct answer is A

auditors group

https://cloud.google.com/iam/docs/job-functions/auditing?hl=ja#scenario_external_auditors

A Create a group with the auditors, grant 'logging.viewer' and 'bigQuery.dataViewer roles to the group on a table / view with the required data.

AS per Google best practices the roles should be assigned to a group & not to individual users

A is correct. 1st you should know this is a exam. Google recommend xxx means you should choose group first.

The correct answer is A. This option follows Google-recommended practices, because it allows you to grant auditors access to view audit logs without granting them access to other resources in your project. The other options are not as good: * Option B is not as good, because it requires you to create two new custom IAM roles. This can be complex and time-consuming. * Option C is not as good, because it grants auditors access to all audit logs in your project, including audit logs for resources that they do not need access to. * Option D is not as good, because it grants auditors access to all data in your BigQuery datasets, including data that they do not need access to.

Google Recommended Practice A is the correct Answer add the users in the group then grant them the access

C Option A, which suggests adding the auditors group to predefined roles, might not be as appropriate as using individual auditor user accounts. It's generally a best practice to assign permissions to specific users rather than groups, as it provides better granularity and control over access.

Correct answer is A