Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 106

Question

You work for a large organization where each business unit has thousands of users. You need to delegate management of access control permissions to each business unit. You have the following requirements: • Each business unit manages access controls for their own projects. • Each business unit manages access control permissions at scale. • Business units cannot access other business units' projects. • Users lose their access if they move to a different business unit or leave the company. • Users and access control permissions are managed by the on-premises directory service. What should you do? (Choose two.)

Accepted Answer

Correct answer: B, E. The correct answer is B, E. Option B: Organize projects in folders, and assign permissions to Google groups at the folder level. Option E: Use Google Cloud Directory Sync to synchronize users and group memberships in Cloud Identity. Cloud Identity manages users, groups, and device policies as a managed identity platform.

Google Cloud Professional Cloud Security Engineer PCSE — Question 106