Free PROFESSIONAL-CLOUD-ARCHITECT Web TestEngine Demo

Q16 Single choice

Your company has just recently activated Cloud Identity to manage users. The Google Cloud Organization has been configured as well. The security team needs to secure projects that will be part of the Organization. They want to prohibit IAM users outside the domain from gaining permissions from now on.

What should they do?

A
Configure an organization policy to restrict identities by domain
B
Configure an organization policy to block creation of service accounts
C
Configure Cloud Scheduler to trigger a Cloud Function every hour that removes all users that don't belong to the Cloud identity domain from all projects.
D
Create a technical user (e.g., [email protected]), and give it the project owner role at root organization level.

PROFESSIONAL-CLOUD-ARCHITECT Web TestEngine demo