ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 91 - Cloud Digital Leader discussion

Report
Export

An organization has had a data leak scare because one employee made a sensitive Cloud Storage bucket available to the public. Given the nature of the company's business, it is understood that there is never any reason to give the public direct access to any file. The security head wants to ensure that such an event never occurs again. How can you ensure this?

A.
Remove Edit access rights of all Cloud Storage buckets so that no user can make any edits.
Answers
A.
Remove Edit access rights of all Cloud Storage buckets so that no user can make any edits.
B.
Set an organizational policy constraint to restrict bucket access set to the public.
Answers
B.
Set an organizational policy constraint to restrict bucket access set to the public.
C.
Use Cloud Scheduler to run a job at a specified interval to scan buckets. Any public permissions can be programmatically changed.
Answers
C.
Use Cloud Scheduler to run a job at a specified interval to scan buckets. Any public permissions can be programmatically changed.
D.
Write Cloud Functions code connected to Cloud Storage. Any changes will be notified to the function which can be used to reset the public access.
Answers
D.
Write Cloud Functions code connected to Cloud Storage. Any changes will be notified to the function which can be used to reset the public access.
Suggested answer: B

Explanation:

The straightforward way to set it is using Organizational Policy constraint. Any attempts to change the organizational setting will be rejected for any project and resource.

References link:

-> https://cloud.google.com/resource-manager/docs/organization-policy/overview

-> https://cloud.google.com/resource-manager/docs/organization-policy/org-policy-constraints

asked 18/09/2024
Charles Brono
45 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first