Professional Cloud Architect · Free Practice Question Medium
Question 14
As a new cloud architect, you need to manage your first GCP project. The project will involve product owners, developers and testers. You need to make sure that only specific members of the development team have access to sensitive information (PII data). To do this, you want to assign the appropriate IAM roles. What should you do?
-
A
You should create groups. Assign a basic role to each group, and then assign users to groups.
-
B
You should assign a basic role to each user.
-
C
You should create groups. Assign a Custom role to each group, including those who should have access to sensitive data. Then, assign users to groups.
-
D
You should create groups. Assign an IAM Predefined role to each group as required, including those who should have access to sensitive data. Than, assign users to groups.
Reveal correct answer
Correct answer: D
A.
Assigning basic roles to each group is not sufficient to restrict access to sensitive information.
B.
Assigning basic roles to each user is not sufficient to restrict access to sensitive information.
C.
Custom roles can be created, but it is not necessary in this scenario since IAM predefined roles already exist that can grant the necessary permissions.
D.
In this scenario, the cloud architect needs to manage a GCP project that involves product owners, developers, and testers. The goal is to restrict access to sensitive information (PII data) to specific members of the development team. To accomplish this, the cloud architect should first create groups and assign IAM predefined roles to each group as required, including those who should have access to sensitive data. The cloud architect can then assign users to the groups. Using groups is important because it simplifies the management of permissions. If the cloud architect assigned roles to individual users instead of groups, the process would be more difficult to manage and would require updating each user's permissions individually.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
