Question 239 of 318
Single answerYour Google Cloud environment has one organization node, one folder named “Appsâ€, and several projects within that folder. The organizational node enforces the constraints/iam.allowedPolicyMemberDomains organization policy, which allows members from the terramearth.com organization. The “Apps†folder enforces the constraints/iam.allowedPolicyMemberDomains organization policy, which allows members from the flowlogistic.com organization. It also has the inheritFromParent: false property.
You attempt to grant access to a project in the “Apps†folder to the user testuser@terramearth.com.
What is the result of your action and why?
You attempt to grant access to a project in the “Apps†folder to the user testuser@terramearth.com.
What is the result of your action and why?
AThe action succeeds because members from both organizations, terramearth.com or flowlogistic.com, are allowed on projects in the “Apps†folder.
BThe action succeeds and the new member is successfully added to the project's Identity and Access Management (IAM) policy because all policies are inherited by underlying folders and projects.
CThe action fails because a constraints/iam.allowedPolicyMemberDomains organization policy must be defined on the current project to deactivate the constraint temporarily.
✓DThe action fails because a constraints/iam.allowedPolicyMemberDomains organization policy is in place and only members from the flowlogistic.com organization are allowed.
✓
Correct Answer: D
The action fails because a constraints/iam.allowedPolicyMemberDomains organization policy is in place and only members from the flowlogistic.com organization are allowed.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.