Professional Cloud ArchitectDemo

By Google · Question Mode

QuestionQ177

Designing for security and compliance

Google Cloud Platform resources are organized hierarchically through organizations, folders, and projects. When Cloud Identity and Access Management (IAM) policies are set at these different levels, what is the effective policy at a specific node in the hierarchy?

  • A The effective policy is determined only by the policy set at the node
  • B The effective policy is the policy set at the node and restricted by the policies of its ancestors
  • C The effective policy is the union of the policy set at the node and policies inherited from its ancestors
  • D The effective policy is the intersection of the policy set at the node and policies inherited from its ancestors
Explanation

Google Cloud IAM allow policies propagate downward through the resource hierarchy. A resource’s effective allow policy is the union of the allow policy set on that resource and the allow policy inherited from its parent resources.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!