Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 301

Question

Your organization is implementing separation of duties in a Google Cloud project. A group of developers must deploy new code, but cannot have permission to change network firewall rules. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create and assign two custom IAM roles. Assign the deployer role to control Compute Engine and deployment-related permissions. Assign the network administrator role to manage firewall permissions. Compute Engine provides configurable virtual machines when you need full control of the OS. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Professional Cloud Security Engineer PCSE — Question 301