Examtopics

Professional Cloud Security Engineer

  • Topic 1 Question 232

    Your organization uses the top-tier folder to separate application environments (prod and dev). The developers need to see all application development audit logs, but they are not permitted to review production logs. Your security team can review all logs in production and development environments. You must grant Identity and Access Management (IAM) roles at the right resource level for the developers and security team while you ensure least privilege.

    What should you do?

      1. Grant logging.viewer role to the security team at the organization resource level.
      2. Grant logging.viewer role to the developer team at the folder resource level that contains all the dev projects.
      1. Grant logging.viewer role to the security team at the organization resource level.
      2. Grant logging.admin role to the developer team at the organization resource level.
      1. Grant logging.admin role to the security team at the organization resource level.
      2. Grant logging.viewer role to the developer team at the folder resource level that contains all the dev projects.
      1. Grant logging.admin role to the security team at the organization resource level.
      2. Grant logging.admin role to the developer team at the organization resource level.
    シャッフルモード