1.4 Managing and Implementing Authorization Controls PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   When configuring a Privileged Access Manager (PAM) grant, what is a required component of the configuration?

   • AA duration for which the access will be valid.
   • BA list of IP addresses from which the access is allowed.
   • CA VPC network to which the access is scoped.
   • DA service account that will be used to access the resources.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In Google Cloud IAM, what is the relationship between a role and a permission?

   • AA role is a named set of one or more permissions that can be granted to an identity.
   • BA role defines a resource type, and a permission defines the identity that can access it.
   • CA role and a permission are interchangeable terms for the same IAM concept.
   • DA permission is a named set of one or more roles that can be assigned to a resource.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of Access Context Manager in Google Cloud?

   • ATo configure firewall rules for VPC networks.
   • BTo manage IAM roles and permissions for users.
   • CTo monitor and audit access to cloud resources.
   • DTo define context-aware access policies based on attributes like device and IP address.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In the Google Cloud resource hierarchy, which level is the highest and can apply policies to all resources beneath it?

   • AOrganization
   • BResource
   • CFolder
   • DProject
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   A company wants to grant the 'Security Reviewer' role to a team of five new security engineers. What is the most efficient way to manage this using Google Groups?

   • ACreate a Google Group, add the five engineers to the group, and grant the role to the group.
   • BGrant the role to each of the five engineers individually.
   • CCreate a custom role for each engineer and grant it to them.
   • DGrant the role to the organization and then remove it from other users.
   Reveal Solution Discussion Select an answer first