1.4 Managing and Implementing Authorization Controls PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 7)

Questions 31–32

1. 31foundation · easy

   Which attribute can be used in an Access Context Manager access level to restrict access to requests coming from a specific network?

   • Arequest.time
   • Bresource.service
   • Cdestination.ip
   • Dorigin.ip
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   You are configuring Privileged Access Manager for your organization. You need to allow a group of support engineers to request temporary access to the Project IAM Admin role on a specific project. The request must be approved by a designated approver. What should you configure?

   • ACreate a role grant with the Project IAM Admin role, set the eligible principals to the support group, and assign an approver.
   • BGrant the Project IAM Admin role directly to the support group with an IAM condition for time.
   • CUse Access Context Manager to allow the support group to access the project only during business hours.
   • DCreate a custom role with the same permissions as Project IAM Admin and assign it to the support group.
   Reveal Solution Discussion Select an answer first