Question 139 of 139
Single answerYour organization is migrating a complex application to Google Cloud. The application has multiple internal components that interact with each other across several Google Cloud projects. Security is a major concern, and you must design an authorization scheme for administrators that aligns with the principles of least privilege and separation of duties. What should you do?
✓AIdentify the users who will migrate the application, revoke the default user roles and assign the users with purposely created custom roles.
BUse multiple external identity providers (IdP) configured to use different SAML profiles and federate the IdPs for each application component.
CConfigure multi-factor authentication (MFA) to enforce the use of physical tokens for all users who will migrate the application.
DNo action needed. When a Google Cloud organization is created, the appropriate permissions are automatically assigned to all users in the domain.
✓
Correct Answer: A
Identify the users who will migrate the application, revoke the default user roles and assign the users with purposely created custom roles.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.