Eccouncil 312-40 Exam - Topic 10 Question 16 Discussion

Actual exam question for Eccouncil's 312-40 exam

Question #: 16
Topic #: 10

Jordon Bridges works as a cloud security engineer in a multinational company. His organization uses Google cloud-based services (GC) because Google cloud provides robust security services, better pricing than competitors, improved performance, and redundant backup. Using IAM security configuration, Jordon implemented the principle of least privilege. A GC IAM member could be a Google account, service account, Google group, G Suite, or cloud identity domain with an identity to access Google cloud resources. Which of the following identities is used by GC IAM members to access Google cloud resources?

AFor Google Account, Google group, and service account, the identity used is the domain name,
whereas in G Suite and cloud identity domain, the identity used is an email address.

BFor Google Account, Google group, and service account, the identity used is an email address,
whereas in G Suite and cloud identity domain, the identity used is the domain name.

CFor Google Account, Google group, and G suite, the identity used is the domain name, whereas in
service account and cloud identity domain, the identity used is an email address.

DFor Google Account, Google group, and G suite, the identity used is an email address, whereas in
service account and cloud identity domain, the identity used is the domain name.

Show Suggested Answer

Suggested Answer: B

1.Google Cloud IAM Members: In Google Cloud IAM, members can be individuals or entities that interact with Google Cloud resources. These members are assigned roles that grant them permissions to perform specific actions1.

1.Identity Types: The identities used by IAM members to access Google Cloud resources are typically email addresses or domain names, depending on the type of member1.

1.Email Address as Identity: For a Google Account, Google group, and service account, the identity is generally an email address. This email address is used to uniquely identify the member within Google Cloud's IAM system1.

1.Domain Name as Identity: For G Suite and Cloud Identity domains, the identity is the domain name associated with the organization's account. This domain name represents the collective identity of the organization within Google Cloud1.

1.Access to Resources: IAM members use these identities to authenticate and gain access to Google Cloud resources as per the permissions defined by their assigned roles1.

Medium article on IAM Demystified1.

by Glendora at Sep 16, 2024, 08:30 AM

Limited Time Offer

25%

Off

Get Premium 312-40 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dalene

6 months ago

I thought it was C at first, but now I'm confused!

upvoted 0 times

...

Merlyn

6 months ago

I’m leaning towards D, but I’m not sure.

upvoted 0 times

...

Jamal

6 months ago

Wait, isn't it A? I thought domain names were for G Suite.

upvoted 0 times

...

Meghan

7 months ago

Totally agree, B makes the most sense!

upvoted 0 times

...

Delsie

7 months ago

I think it's B, email address for Google Account and service account.

upvoted 0 times

...

Tayna

7 months ago

If I recall correctly, Google groups and service accounts definitely use email addresses, but I can't remember how that relates to the domain names.

upvoted 0 times

...

Martina

7 months ago

I'm a bit confused about the distinction between domain names and email addresses in this context. I feel like I need to review that part again.

upvoted 0 times

...

Joaquin

7 months ago

I think I practiced a similar question where it mentioned that G Suite identities are usually email addresses. That might help narrow it down.

upvoted 0 times

...

Lonna

8 months ago

I remember studying that Google accounts and service accounts typically use email addresses for identity, but I'm not entirely sure about the groups.

upvoted 0 times

...

Mertie

8 months ago

Ah, I see what they're getting at here. The identity used depends on the specific GC IAM member type. I think I can narrow this down by considering the characteristics of each member type.

upvoted 0 times

...

Beckie

8 months ago

I'm a bit unsure about the differences between the GC IAM member types and how their identities are used. I'll need to re-read the question and options carefully to make sure I don't miss any key details.

upvoted 0 times

...

Paris

8 months ago

This looks like a straightforward question about IAM identities. I'm pretty confident I can figure this out based on my understanding of Google Cloud security concepts.

upvoted 0 times

...

Jacki

8 months ago

Hmm, this one seems tricky. I'll need to carefully read through the options and think about the differences between the various GC IAM member types.

upvoted 0 times

...

Santos

8 months ago

Okay, let me see if I can break this down. The question is asking about the identity used to access Google cloud resources for different GC IAM member types. I'll need to pay close attention to the details.

upvoted 0 times

...

Whitley

2 years ago

What a weird question. Do people actually use domain names to access Google Cloud resources? I'm going with B.

upvoted 0 times

Augustine

2 years ago

I agree, using email addresses seems more practical. I'll go with B too.

upvoted 0 times

...

Craig

2 years ago

I'm not sure about that, I believe it's more common to use email addresses. I'll choose B.

upvoted 0 times

...

Marge

2 years ago

I think people actually do use domain names to access Google Cloud resources. I'm going with A.

upvoted 0 times

...

Valentin

2 years ago

I'm with Deeanna on this one. A) makes more sense to me because it aligns with how Jordon implemented the principle of least privilege using IAM security configuration.

upvoted 0 times

...

Joesph

2 years ago

Haha, this question reminds me of the time I accidentally gave my email address as a domain name. Anyway, I think the answer is B.

upvoted 0 times

...

Shawana

2 years ago

I disagree, I believe the correct answer is B) For Google Account, Google group, and service account, the identity used is an email address, whereas in G Suite and cloud identity domain, the identity used is the domain name.

upvoted 0 times

...

Blondell

2 years ago

This question is a bit tricky, but I'm going with C. The domain name is used for Google Account, Google group, and G Suite, while the email address is used for service account and cloud identity domain.

upvoted 0 times

Filiberto

2 years ago

Hmm, this is a tough one. I'm going to go with A. For Google Account, Google group, and service account, the identity used is the domain name, whereas in G Suite and cloud identity domain, the identity used is an email address.

upvoted 0 times

...

Shawnda

2 years ago

I see your point, but I still think C is the right answer. For Google Account, Google group, and G suite, the identity used is the domain name, whereas in service account and cloud identity domain, the identity used is an email address.

upvoted 0 times

...

Rebecka

2 years ago

I disagree, I believe the correct answer is D. For Google Account, Google group, and G suite, the identity used is an email address, whereas in service account and cloud identity domain, the identity used is the domain name.

upvoted 0 times

...

Yun

2 years ago

I think the answer is B. For Google Account, Google group, and service account, the identity used is an email address, whereas in G Suite and cloud identity domain, the identity used is the domain name.

upvoted 0 times

...

Deeanna

2 years ago

I think the answer is A) For Google Account, Google group, and service account, the identity used is the domain name, whereas in G Suite and cloud identity domain, the identity used is an email address.

upvoted 0 times

...

Jin

2 years ago

Hmm, I'm pretty sure it's D. The domain name is used for Google Account, Google group, and G Suite, while the email address is used for service account and cloud identity domain.

upvoted 0 times

...