MENU
Your Google Cloud environment has one organization node, one folder named Apps." and several projects within that folder The organizational node enforces the constraints/iam.allowedPolicyMemberDomains organization policy, which allows members from the terramearth.com organization The "Apps" folder enforces the constraints/iam.allowedPolicyMemberDomains organization policy, which allows members from the flowlogistic.com organization. It also has the inheritFromParent: false property.
You attempt to grant access to a project in the Apps folder to the user testuser@terramearth.com.
What is the result of your action and why?
Suggested Answer: A, C
Get Premium Professional Cloud Security Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
44 comments · newest first
EI
Eileen
11 months ago
So, does that mean we can't grant access to users from terramearth.com at all?
ED
Eden
11 months ago
B is definitely the right answer here.
ME
Melvin
11 months ago
Wait, I thought policies could be overridden?
DA
Dahlia
11 months ago
Totally agree, only flowlogistic.com members can access it.
MI
Michael
12 months ago
The action fails because of the policy restrictions.
IS
Isadora
12 months ago
I thought policies could be overridden, but this question seems to indicate that the restrictions are strict. So, maybe it fails?
RA
Ranee
1 year ago
I practiced a similar question, and I believe the constraints on the folder would prevent adding a user from terramearth.com.
TA
Tawna
1 year ago
I'm not entirely sure, but I remember something about inherited policies. Could it be that the project inherits the restrictions from the Apps folder?
MA
Malcolm
1 year ago
I think the action fails because of the organization policy restricting access to flowlogistic.com members only.
YA
Yaeko
1 year ago
I've got a strategy in mind, but I want to make sure I'm not missing any important details. Gotta be careful with these organization policy questions.
MI
Milly
1 year ago
Whoa, this is a complex scenario. I'm going to take my time and make sure I understand all the moving parts before I select an answer.
PE
Pedro
1 year ago
Alright, time to put on my problem-solving hat. I think I know where to start, but I'll need to double-check my understanding of the organization policy rules.
SH
Shay
1 year ago
Okay, let me see here. The key seems to be the inheritFromParent: false property on the "Apps" folder. I'll need to consider how that affects the policy enforcement.
DO
Douglass
1 year ago
Hmm, this looks like a tricky one. I'll need to carefully read through the details and think through the organization policy constraints.
JU
Justine
1 year ago
I'm feeling pretty confident about this one. The sample data looks clear, and I know just the Python snippets I need to use to solve this.
GE
German
1 year ago
Wait, did they just try to sneak in a 'constraints/iam.allowedPolicyMemberDomains' policy on me? Talk about a mouthful! I'll stick with Option B and keep my sanity.
EL
Ellen
1 year ago
Hold on, does this mean I can just bypass all the organization policies by adding users directly to the project? Seems a bit too good to be true. I better go with Option B to be safe.
TE
Temeka
1 year ago
Aha, I see what they're trying to do here! The 'Apps' folder has the inheritFromParent: false property, so the action should fail. Option B is the way to go.
GA
Garry
1 year ago
Exactly, that's why option B is the correct answer.
AU
Audry
1 year ago
Yeah, you're right. The inheritFromParent property is set to false, so the action won't succeed.
CA
Carisa
1 year ago
I think the action fails because the 'Apps' folder only allows members from the flowlogistic.com organization.
FR
Francis
1 year ago
Hmm, I'm not sure about this one. The question seems a bit tricky, but I'm leaning towards Option B. Can't be too careful with those pesky organization policies!
ST
Stevie
1 year ago
Let's review the policies together to make sure we're on the right track.
PE
Pearly
1 year ago
I'm not so sure, maybe we should double-check the policies before making any changes.
RO
Rosita
1 year ago
Yeah, I agree. It's better to be cautious with these things.
RI
Rikki
1 year ago
I think Option B is correct. Those organization policies can be strict.
NI
Nickolas
1 year ago
The policy in the 'Apps' folder doesn't allow members from the terramearth.com organization, so the action should fail. Option B is the correct answer.
GA
Garry
1 year ago
Wait, did they just try to sneak in a 'constraints/iam.allowedPolicyMemberDomains' policy on me? Talk about a mouthful! I'll stick with Option B and keep my sanity.
CH
Chun
1 year ago
Definitely sticking with Option B, better safe than sorry with those constraints.
DU
Dulce
1 year ago
Yeah, Option B is the way to go. Can't risk messing with those policies.
AL
Alverta
1 year ago
I agree, that policy name is a mouthful! Option B seems like the safest choice.
JE
Jess
2 years ago
Hold on, does this mean I can just bypass all the organization policies by adding users directly to the project? Seems a bit too good to be true. I better go with Option B to be safe.
CO
Colette
1 year ago
User 2: Yeah, I agree. Option B seems like the safest choice in this situation.
LY
Lyndia
1 year ago
User 1: I think you're right, it might be risky to bypass the organization policies.
CH
Christiane
2 years ago
Aha, I see what they're trying to do here! The 'Apps' folder has the inheritFromParent: false property, so the action should fail. Option B is the way to go.
DA
Darrin
2 years ago
Hmm, I'm not sure about this one. The question seems a bit tricky, but I'm leaning towards Option B. Can't be too careful with those pesky organization policies!
JO
Joanna
2 years ago
The policy in the 'Apps' folder doesn't allow members from the terramearth.com organization, so the action should fail. Option B is the correct answer.
RI
Rima
1 year ago
Option B is the correct answer then. Thanks for clarifying.
PA
Paris
1 year ago
So, the result of the action would be that it fails because only members from flowlogistic.com are allowed.
GE
German
1 year ago
Yes, you're right. The constraints/iam.allowedPolicyMemberDomains organization policy is in place for the 'Apps' folder.
PA
Pamella
1 year ago
I think the action fails because the policy in the 'Apps' folder only allows members from the flowlogistic.com organization.
KA
Katy
2 years ago
Hmm, that makes sense. I see your point now.
ED
Eden
2 years ago
I disagree, I believe the answer is D. All policies are inherited by underlying folders and projects.
KA
Katy
2 years ago
I think the answer is B. Only members from flowlogistic.com are allowed.