Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Google Professional Cloud Database Engineer Exam - Topic 8 Question 75 Discussion

Your organization operates in a highly regulated industry. Separation of concerns (SoC) and security principle of least privilege (PoLP) are critical. The operations team consists of:Person A is a database administrator.Person B is an analyst who generates metric reports.Application C is responsible for automatic backups.You need to assign roles to team members for Cloud Spanner. Which roles should you assign?
A) roles/spanner.databaseAdmin for Person A roles/spanner.databaseReader for Person B roles/spanner.backupWriter for Application C
B) roles/spanner.databaseAdmin for Person A roles/spanner.databaseReader for Person B roles/spanner.backupAdmin for Application C
C) roles/spanner.databaseAdmin for Person A roles/spanner.databaseUser for Person B roles/spanner databaseReader for Application C
D) roles/spanner.databaseAdmin for Person A roles/spanner.databaseUser for Person B roles/spanner.backupWriter for Application C

Google Professional Cloud Database Engineer Exam - Topic 8 Question 75 Discussion

Actual exam question for Google's Professional Cloud Database Engineer exam
Question #: 75
Topic #: 8
[All Professional Cloud Database Engineer Questions]

Your organization operates in a highly regulated industry. Separation of concerns (SoC) and security principle of least privilege (PoLP) are critical. The operations team consists of:

Person A is a database administrator.

Person B is an analyst who generates metric reports.

Application C is responsible for automatic backups.

You need to assign roles to team members for Cloud Spanner. Which roles should you assign?

Show Suggested Answer Hide Answer
Suggested Answer: A

https://cloud.google.com/spanner/docs/iam#spanner.backupWriter


Contribute your Thoughts:

0/2000 characters
Basilia
3 days ago
A) is definitely the safest choice here!
upvoted 0 times
...
Martina
8 days ago
I think D) is too permissive for Person B.
upvoted 0 times
...
Rasheeda
14 days ago
Wait, why would Application C need backupAdmin?
upvoted 0 times
...
Dortha
19 days ago
I disagree, B) has the better backup role.
upvoted 0 times
...
Estrella
24 days ago
A) seems right for the roles.
upvoted 0 times
...
Lynsey
29 days ago
I feel like option A makes the most sense overall, but I can't shake the feeling that I might be overlooking something with the backup roles.
upvoted 0 times
...
Ona
1 month ago
I practiced a similar question where the roles were mixed up. I think databaseReader is right for Person B, but I'm confused about the backup roles.
upvoted 0 times
...
Paz
1 month ago
I'm not entirely sure about Application C's role. I thought backupWriter was correct, but backupAdmin sounds familiar too.
upvoted 0 times
...
Julianna
1 month ago
I remember we discussed the principle of least privilege, so I think Person A definitely needs the databaseAdmin role.
upvoted 0 times
...

Save Cancel