Professional Cloud Security EngineerDemo

By Google · Question Mode

QuestionQ318

Configuring access

Your company’s new CEO has recently sold two company divisions. Your Director asks you to assist with migrating the Google Cloud projects associated with those divisions to a new organization node. Which preparation steps are required before this migration takes place?

Choose two
  • A Remove all project-level custom Identity and Access Management (IAM) roles.
  • B Disallow inheritance of organization policies.
  • C Identify inherited Identity and Access Management (IAM) roles on projects to be migrated.
  • D Create a new folder for all projects to be migrated.
  • E Remove the specific migration projects from any VPC Service Controls perimeters and bridges.
Explanation

IAM roles inherited from the source organization or folder are lost when a project moves to a new organization hierarchy, so identifying those inherited roles is necessary to plan equivalent access in the destination. A project protected by a VPC Service Controls security perimeter cannot be migrated; it must be removed from the perimeter before migration.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!