Exam Associate Cloud Engineer topic 1 question 285 discussion

Actual exam question from Google's Associate Cloud Engineer

Question #: 285
Topic #: 1

[All Associate Cloud Engineer Questions]

Your organization is migrating to Google Cloud. You want only users with company-issued Google accounts to access your Google Cloud environment. You must ensure that users of the same department can only access resources within their own department. You want to minimize operational costs while following Google-recommended practices. What should you do?

A. Assign users to the relevant Google Groups, and provide access to cloud resources through Identity and Access Management (IAM) roles. Periodically identify and remove non-company issued Google accounts.
B. Assign users to the relevant Google Groups, and provide access to cloud resources through Identity and Access Management (IAM) roles. Use organization policies to block non-company issued emails.
C. Create a folder for each department in Resource Manager. Grant the users of each department the Folder Admin role on the folder of their department.
D. Create a folder for each department in Resource Manager. Grant all company users the Folder Admin role on the organization level.

Show Suggested Answer

Suggested Answer: B 🗳️

by MohannadSamir at May 18, 2025, 1:34 p.m.

Comments

Submit Cancel

MohannadSamir

1 month ago

Selected Answer: B

Why B is the best answer: a) Using Google Groups and IAM roles: Google Groups provides efficient management of user permissions IAM roles allow granular control over resource access This is a Google-recommended practice for managing permissions at scale b) Organization policies to block non-company emails: Organization policies provide a centralized way to enforce security controls Can specifically block non-company email domains Prevents unauthorized access attempts at the organization level Automated enforcement reduces operational overhead

upvoted 1 times

...