Cloud-Digital-Leader VCE Exam Download

The correct answer is B. Least privilege. Here's why:

Context of the Question: The organization wants to ensure that users are granted only the permissions required for their job responsibilities, aligning with a specific security principle.

Google Cloud Product Relevance:

The Least Privilege principle is a fundamental security concept that dictates that users should be given the minimum level of access—or permissions—necessary to perform their job functions. This reduces the risk of unauthorized access and potential security breaches.

In Google Cloud, Identity and Access Management (IAM) can be used to implement the least privilege principle by assigning roles and permissions that are tightly scoped to users' specific responsibilities.

Why Not Other Options:

A. Security by default: This is a general security approach where security settings are enabled by default, but it does not specifically address access control.

C. Zero-trust: Zero-trust is a broader security model that assumes no implicit trust within a network; it complements but does not replace the least privilege approach.

D. Cyber resilience: This refers to an organization’s ability to continue operations during a cyber incident, which is different from granting minimal permissions.

Google Cloud Digital Leader References:

Refer to Google Cloud IAM documentation for more information on implementing the principle of least privilege in Google Cloud.

Accepting failure as normal is one of the SRE principles. SREs believe that accepting failure as normal helps to build an iterative, collaborative culture. One way this is done is by holding a blameless “lessons learned” discussion after an incident occurs.