Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Security Engineer Exam - Topic 4 Question 40 Discussion

You are a security administrator at your company. Per Google-recommended best practices, you implemented the domain restricted sharing organization policy to allow only required domains to access your projects. An engineering team is now reporting that users at an external partner outside your organization domain cannot be granted access to the resources in a project. How should you make an exception for your partner's domain while following the stated best practices?
B) Turn off the domain restricted sharing organization policy. Provide the external partners with the required permissions using Google's Identity and Access Management (IAM) service.
A) Turn off the domain restriction sharing organization policy. Set the policy value to 'Allow All.'
C) Turn off the domain restricted sharing organization policy. Add each partner's Google Workspace customer ID to a Google group, add the Google group as an exception under the organization policy, and then turn the policy back on.
D) Turn off the domain restricted sharing organization policy. Set the policy value to 'Custom.' Add each external partner's Cloud Identity or Google Workspace customer ID as an exception under the organization policy, and then turn the policy back on.

Google Professional Cloud Security Engineer Exam - Topic 4 Question 40 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam
Question #: 40
Topic #: 4
[All Professional Cloud Security Engineer Questions]

You are a security administrator at your company. Per Google-recommended best practices, you implemented the domain restricted sharing organization policy to allow only required domains to access your projects. An engineering team is now reporting that users at an external partner outside your organization domain cannot be granted access to the resources in a project. How should you make an exception for your partner's domain while following the stated best practices?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Matthew at May 07, 2022, 11:13 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Moon
10 months ago
B is too broad; we need to be more specific with permissions.
upvoted 0 times
...
Margery
10 months ago
Just turning off the policy feels like a bad move.
upvoted 0 times
...
Brock
11 months ago
Wait, can we really just add customer IDs like that? Sounds risky.
upvoted 0 times
...
Darrin
11 months ago
I disagree, D is more straightforward for managing exceptions.
upvoted 0 times
...
Clement
11 months ago
C seems like the best option to keep things secure.
upvoted 0 times
...
Curt
11 months ago
I vaguely recall something about using IAM for permissions, but I’m not sure if that’s the best approach here. Option B seems risky since it might not keep the restrictions in place.
upvoted 0 times
...
Gerald
11 months ago
I feel like we practiced a similar question where we had to balance security and access. Option D seems to align with that, but I’m not 100% confident about the specifics of adding exceptions.
upvoted 0 times
...
Lucina
11 months ago
I'm not entirely sure, but I think turning off the domain restriction completely, like in option A, could expose us to risks. We should definitely avoid that.
upvoted 0 times
...
Glendora
11 months ago
I remember we discussed the importance of keeping the domain restriction policy in place for security. I think option C sounds like a good way to make an exception while still following best practices.
upvoted 0 times
...
Virgie
11 months ago
I've got this! The invalid sequence is option A, where the defect goes back and forth between Working and Clarification multiple times before reaching Verification and Closed.
upvoted 0 times
...
Rene
11 months ago
Multitenancy definitely seems like the most relevant cloud aspect that could complicate eDiscovery. I'll go with that.
upvoted 0 times
...
Dottie
11 months ago
Hmm, I'm a bit confused. The question mentions the ID is 'myText', but option A uses 'text1'. I'll need to double-check the code to make sure I'm selecting the right element.
upvoted 0 times
...

Save Cancel