Topic 1 Question 12
You recently inherited a task for managing Dataflow streaming pipelines in your organization and noticed that proper access had not been provisioned to you. You need to request a Google-provided IAM role so you can restart the pipelines. You need to follow the principle of least privilege. What should you do?
Request the Dataflow Developer role.
Request the Dataflow Viewer role.
Request the Dataflow Worker role.
Request the Dataflow Admin role.
ユーザの投票
コメント(2)
- 正解だと思う選択肢: A
The best option is A. Request the Dataflow Developer role. Requesting the Dataflow Developer role is optimal because it grants the necessary permissions to restart Dataflow pipelines, aligning with the user's need, while adhering to the principle of least privilege by providing a focused set of permissions. Option B (Dataflow Viewer) is insufficient as it only provides read-only access and lacks the permission to restart pipelines. Option C (Dataflow Worker) is incorrect as it is intended for service accounts, not user access, and doesn't grant pipeline management permissions. Option D (Dataflow Admin) is excessive, granting far more permissions than needed for simply restarting pipelines, thus violating the principle of least privilege. Therefore, Option A is the clear and correct choice for requesting the minimum necessary IAM role to restart Dataflow pipelines.
👍 2n21837128472025/02/27 - 正解だと思う選択肢: C
Dataflow Worker provides the necessary permissions for managing and interacting with Dataflow streaming pipelines, including restarting them. This role gives you the ability to execute and manage the pipelines without granting excessive permissions, aligning with the principle of least privilege.
👍 1jatinbhatia20552025/02/23
シャッフルモード