Topic 1 Question 134
Your company is using Google Cloud. You have two folders under the Organization: Finance and Shopping. The members of the development team are in a Google Group. The development team group has been assigned the Project Owner role on the Organization. You want to prevent the development team from creating resources in projects in the Finance folder. What should you do?
Assign the development team group the Project Viewer role on the Finance folder, and assign the development team group the Project Owner role on the Shopping folder.
Assign the development team group only the Project Viewer role on the Finance folder.
Assign the development team group the Project Owner role on the Shopping folder, and remove the development team group Project Owner role from the Organization.
Assign the development team group only the Project Owner role on the Shopping folder.
ユーザの投票
コメント(17)
It is C
👍 31kopper20192021/07/02Answer C is correct. Answer A and B are both overridden by the less-restrictive permission on Organization level. Answer D permission was already there on Organization level, and does not remove the project owner permission on the other folder
👍 11milan742021/07/10- 正解だと思う選択肢: C
It says "The development team has received Project Owner Role in the Organization level" This means the only answer viable to not be able to access Finance folder resources is to remove that initial role that they were assigned and assign the new one, hence only C mentions removing the role. Remember IAM roles are hereditary downwards, therefor even if we assign Project Viewer to that Group, they still keep their Project Owner in the Project, unless removed.
👍 8alexandercamachop2022/09/11
シャッフルモード