Question 228 of 318
Single answerYour organization uses the top-tier folder to separate application environments (prod and dev). The developers need to see all application development audit logs, but they are not permitted to review production logs. Your security team can review all logs in production and development environments. You must grant Identity and Access Management (IAM) roles at the right resource level for the developers and security team while you ensure least privilege.
What should you do?
✓A1. Grant logging.viewer role to the security team at the organization resource level.
2. Grant logging.viewer role to the developer team at the folder resource level that contains all the dev projects.
2. Grant logging.viewer role to the developer team at the folder resource level that contains all the dev projects.
B1. Grant logging.viewer role to the security team at the organization resource level.
2. Grant logging.admin role to the developer team at the organization resource level.
2. Grant logging.admin role to the developer team at the organization resource level.
C1. Grant logging.admin role to the security team at the organization resource level.
2. Grant logging.viewer role to the developer team at the folder resource level that contains all the dev projects.
2. Grant logging.viewer role to the developer team at the folder resource level that contains all the dev projects.
D1. Grant logging.admin role to the security team at the organization resource level.
2. Grant logging.admin role to the developer team at the organization resource level.
2. Grant logging.admin role to the developer team at the organization resource level.
✓
Correct Answer: A
1. Grant logging.viewer role to the security team at the organization resource level.<br> 2. Grant logging.viewer role to the developer team at the folder resource level that contains all the dev projects.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.