Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 242

Question

Your Google Cloud environment has one organization node, one folder named “Apps”, and several projects within that folder. The organizational node enforces the constraints/iam.allowedPolicyMemberDomains organization policy, which allows members from the terramearth.com organization. The “Apps” folder enforces the constraints/iam.allowedPolicyMemberDomains organization policy, which allows members from the flowlogistic.com organization. It also has the inheritFromParent: false property. You attempt to grant access to a project in the “Apps” folder to the user [email protected] . What is the result of your action and why?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: The action fails because a constraints/iam.allowedPolicyMemberDomains organization policy is in place and only members from the flowlogistic.com organization are allowed. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources. Organization Policy sets guardrails that constrain how resources can be configured across the org.

Google Cloud Professional Cloud Security Engineer PCSE — Question 242