Question 104 of 318
Choose 2You work for a large organization where each business unit has thousands of users. You need to delegate management of access control permissions to each business unit. You have the following requirements:
✑ Each business unit manages access controls for their own projects.
✑ Each business unit manages access control permissions at scale.
✑ Business units cannot access other business units' projects.
✑ Users lose their access if they move to a different business unit or leave the company.
✑ Users and access control permissions are managed by the on-premises directory service.
What should you do? (Choose two.)
✑ Each business unit manages access controls for their own projects.
✑ Each business unit manages access control permissions at scale.
✑ Business units cannot access other business units' projects.
✑ Users lose their access if they move to a different business unit or leave the company.
✑ Users and access control permissions are managed by the on-premises directory service.
What should you do? (Choose two.)
AUse VPC Service Controls to create perimeters around each business unit's project.
✓BOrganize projects in folders, and assign permissions to Google groups at the folder level.
CGroup business units based on Organization Units (OUs) and manage permissions based on OUs
DCreate a project naming convention, and use Google's IAM Conditions to manage access based on the prefix of project names.
✓EUse Google Cloud Directory Sync to synchronize users and group memberships in Cloud Identity.
✓
Correct Answer: B, E
Organize projects in folders, and assign permissions to Google groups at the folder level.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.