MENU
Your team is developing an application in Google Cloud that executes with user identities maintained by Cloud Identity. Each of your application's users will have an associated Pub/Sub topic to which messages are published, and a Pub/Sub subscription where the same user will retrieve published messages. You need to ensure that only authorized users can publish and subscribe to their own specific Pub/Sub topic and subscription. What should you do?
Suggested Answer: C
Get Premium Professional Cloud Developer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
AM
Amie
10 months ago
D seems like overkill for this scenario.
ST
Stephen
10 months ago
Wait, can you really bind roles at the resource level?
IV
Ivette
11 months ago
C sounds interesting, but not sure if it's necessary.
SA
Salome
11 months ago
I think B might work too, but it's too broad.
LA
Lashaun
11 months ago
A is the best choice for user-specific access!
RO
Rodrigo
11 months ago
I wonder if using a service account is the right choice here; it seems like it might complicate user-specific access.
LO
Lorrine
11 months ago
Granting a custom role sounds interesting, but I can't recall if it would cover the specific needs for publishing and subscribing.
TU
Tuyet
12 months ago
I remember a similar question where we had to set permissions at the project level, but that seemed too broad for this scenario.
LA
Layla
12 months ago
I think we need to bind the user identity to the roles at the resource level, but I'm not entirely sure if that's the best approach for individual topics.
QU
Quentin
1 year ago
This looks tricky. I'm not sure if we should use a service account or bind the user identity directly. I'll need to review the options and think about the pros and cons of each approach.
JU
Justine
1 year ago
Okay, I think I've got a strategy here. We'll need to create a custom role that has the specific permissions required, and then assign that role to each user. That way, they can only access their own resources.
MA
Marti
1 year ago
Hmm, I'm a bit unsure about this one. I know we need to grant the appropriate roles, but I'm not sure if we should do it at the resource level or the project level. I'll need to think this through carefully.
JE
Jeanice
1 year ago
This seems like a straightforward question about managing access to Pub/Sub resources. I think the key is to ensure that each user can only access their own topic and subscription.
ME
Melda
1 year ago
I think we should bind the user identity to the pubsub.publisher and pubsub.subscriber roles at the resource level.