Google Exam Professional Cloud Security Engineer Topic 1 Question 87 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 87
Topic #: 1

[All Professional Cloud Security Engineer Questions]

Your Google Cloud environment has one organization node, one folder named Apps." and several projects within that folder The organizational node enforces the constraints/iam.allowedPolicyMemberDomains organization policy, which allows members from the terramearth.com organization The "Apps" folder enforces the constraints/iam.allowedPolicyMemberDomains organization policy, which allows members from the flowlogistic.com organization. It also has the inheritFromParent: false property.

You attempt to grant access to a project in the Apps folder to the user testuser@terramearth.com.

What is the result of your action and why?

AThe action fails because a constraints/iam.allowedPolicyMemberDomains organization policy must
be defined on the current project to deactivate the constraint temporarily.

BThe action fails because a constraints/iam.allowedPolicyMemberDomains organization policy is in place and only members from the flowlogistic.com organization are allowed.

CThe action succeeds because members from both organizations, terramearth. com or flowlogistic.com, are allowed on projects in the 'Apps' folder

DThe action succeeds and the new member is successfully added to the project's Identity and Access Management (1AM) policy because all policies are inherited by underlying folders and projects.

Show Suggested Answer

Suggested Answer: A, C

https://cloud.google.com/architecture/framework/security/data-residency-sovereignty#manage_your_operational_sovereignty

by Gail at Sep 11, 2024, 02:33 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

German

9 days ago

Wait, did they just try to sneak in a 'constraints/iam.allowedPolicyMemberDomains' policy on me? Talk about a mouthful! I'll stick with Option B and keep my sanity.

upvoted 0 times

...

Ellen

10 days ago

Hold on, does this mean I can just bypass all the organization policies by adding users directly to the project? Seems a bit too good to be true. I better go with Option B to be safe.

upvoted 0 times

...

Temeka

10 days ago

Aha, I see what they're trying to do here! The 'Apps' folder has the inheritFromParent: false property, so the action should fail. Option B is the way to go.

upvoted 0 times

...

Francis

12 days ago

Hmm, I'm not sure about this one. The question seems a bit tricky, but I'm leaning towards Option B. Can't be too careful with those pesky organization policies!

upvoted 0 times

...

Nickolas

19 days ago

The policy in the 'Apps' folder doesn't allow members from the terramearth.com organization, so the action should fail. Option B is the correct answer.

upvoted 0 times

...

Garry

22 days ago

Wait, did they just try to sneak in a 'constraints/iam.allowedPolicyMemberDomains' policy on me? Talk about a mouthful! I'll stick with Option B and keep my sanity.

upvoted 0 times

...

Jess

2 months ago

Hold on, does this mean I can just bypass all the organization policies by adding users directly to the project? Seems a bit too good to be true. I better go with Option B to be safe.

upvoted 0 times

Colette

12 days ago

User 2: Yeah, I agree. Option B seems like the safest choice in this situation.

upvoted 0 times

...

Lyndia

13 days ago

User 1: I think you're right, it might be risky to bypass the organization policies.

upvoted 0 times

...

Christiane

2 months ago

Aha, I see what they're trying to do here! The 'Apps' folder has the inheritFromParent: false property, so the action should fail. Option B is the way to go.

upvoted 0 times

...

Darrin

2 months ago

Hmm, I'm not sure about this one. The question seems a bit tricky, but I'm leaning towards Option B. Can't be too careful with those pesky organization policies!

upvoted 0 times

...

Joanna

2 months ago

The policy in the 'Apps' folder doesn't allow members from the terramearth.com organization, so the action should fail. Option B is the correct answer.

upvoted 0 times