You are the security admin of your company. You have 3,000 objects in your Cloud Storage bucket. You do not want to manage access to each object individually. You also do not want the uploader of an object to always have full control of the object. However, you want to use Cloud Audit Logs to manage access to your bucket.
What should you do?
Suggested Answer: A
Get Premium Professional Cloud Security Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
41 comments · newest first
LA
Lasandra
11 months ago
Not sure if IAM is enough for 3,000 objects... sounds complicated!
KE
Keena
11 months ago
Definitely going with D, it simplifies access management.
MA
Marta
11 months ago
Wait, why would you give allUsers OWNER permission? That's risky!
GR
Graham
11 months ago
I think C could work too, but D is more secure.
VA
Vannessa
12 months ago
Option D is the best choice for managing access!
ZA
Zana
12 months ago
I'm a bit confused about the differences between ACLs and IAM; I hope I remember the right details during the exam!
RO
Rolland
1 year ago
I practiced a similar question about bucket access, and I feel like uniform bucket-level access might be the safest choice here.
GL
Glenna
1 year ago
I think using IAM for managing access is a better option, but I can't recall if default bucket ACLs are still recommended.
AN
Annmarie
1 year ago
I remember we discussed ACLs in class, but I'm not sure if setting it to allUsers is the right approach for security.
MA
Mayra
1 year ago
This question is testing our understanding of Cloud Storage security features. I'll need to weigh the pros and cons of each option carefully.
CR
Cristal
1 year ago
I'm pretty confident I know the right approach here. Setting up Uniform bucket-level access and using IAM seems like the best way to meet the requirements.
KR
Krissy
1 year ago
Okay, I think I've got a strategy here. I'll focus on using IAM to manage access rather than individual ACLs.
GE
Gearldine
1 year ago
Hmm, I'm a bit confused by the question. I'll need to review the Cloud Storage and IAM concepts to make sure I understand what's being asked.
SC
Scot
1 year ago
This seems like a tricky one. I'll need to think carefully about the requirements and the different options.
ES
Esteban
1 year ago
Hmm, this is a lot of details to keep track of. I'll need to read through it carefully and make sure I understand the key inputs and formulas before I try to answer the question.
SO
Sommer
1 year ago
I'm feeling pretty confident about this one. The description clearly lays out the conditions, and I think option D is the correct answer.
DA
Darnell
1 year ago
This is a tricky one. I'm not 100% confident, but I think the key things are the name of the workflow action, the URI where the user will be directed, and the label that appears in the menu. I'll double-check my work before submitting.
MA
Marla
1 year ago
This one seems pretty straightforward. I'm pretty sure the answer is REST, since it uses HTTP messages to transfer data between applications on different hosts.
MA
Marquetta
1 year ago
Haha, option A is like putting a welcome mat in front of your house and saying 'Hey, everyone, come on in!'
GL
Glory
1 year ago
Yeah, option D with Uniform bucket-level access and IAM management is the way to go for better security.
SH
Shawnta
1 year ago
I agree, setting up a default bucket ACL and managing access with IAM seems like a better choice.
BE
Beckie
1 year ago
Haha, definitely don't want to invite everyone in with option A!
HE
Herminia
1 year ago
Option A is definitely not the way to go. It's too risky.
JE
Jennie
1 year ago
Yeah, option D with Uniform bucket-level access and IAM management is the most secure choice.
FR
France
1 year ago
I agree, setting up a default bucket ACL and managing access with IAM seems like a better option.
KR
Kristian
1 year ago
Option A is definitely not the way to go. It's too risky.
CA
Carlee
2 years ago
Hmm, I'm not sure if B is a good idea. Giving read access to all users might not be the best security practice.
JO
Josefa
2 years ago
I'm not sure about that. Wouldn't setting up an ACL with READER permission to a scope of allUsers be easier?
PH
Phillip
2 years ago
D sounds like the right answer. Uniform bucket-level access is the recommended practice for large storage buckets.
TR
Troy
1 year ago
Yes, it simplifies access management and ensures consistent permissions across all objects in the bucket.
BR
Brittni
1 year ago
I agree, setting up Uniform bucket-level access is the best option for managing access to a large number of objects.
FE
Felix
2 years ago
I agree with Darnell. Using IAM for managing access seems like the most secure option.
AN
Andree
2 years ago
I think option C is the way to go. Managing access through IAM is more secure and granular than using ACLs.
SH
Shayne
1 year ago
Yes, using Uniform bucket-level access with IAM is a secure way to manage access.
FL
Fletcher
1 year ago
D) Set up Uniform bucket-level access on the Cloud Storage bucket and manage access for users using IAM.
DO
Dorian
1 year ago
That sounds like a good idea. IAM provides more control over access.
JU
Judy
1 year ago
C) Set up a default bucket ACL and manage access for users using IAM.
DA
Darnell
2 years ago
I think we should set up Uniform bucket-level access on the Cloud Storage bucket and manage access for users using IAM.
MA
Marion
2 years ago
I'm not sure about that. Setting up a default bucket ACL and managing access for users using IAM could also work well.
WA
Walker
2 years ago
I agree with Brent. It's the best option to manage access to the bucket efficiently.
BR
Brent
2 years ago
I think we should set up Uniform bucket-level access on the Cloud Storage bucket and manage access for users using IAM.