Eccouncil Exam 312-40 Topic 10 Question 16 Discussion

Actual exam question for Eccouncil's 312-40 exam

Question #: 16
Topic #: 10

Jordon Bridges works as a cloud security engineer in a multinational company. His organization uses Google cloud-based services (GC) because Google cloud provides robust security services, better pricing than competitors, improved performance, and redundant backup. Using IAM security configuration, Jordon implemented the principle of least privilege. A GC IAM member could be a Google account, service account, Google group, G Suite, or cloud identity domain with an identity to access Google cloud resources. Which of the following identities is used by GC IAM members to access Google cloud resources?

AFor Google Account, Google group, and service account, the identity used is the domain name,
whereas in G Suite and cloud identity domain, the identity used is an email address.

BFor Google Account, Google group, and service account, the identity used is an email address,
whereas in G Suite and cloud identity domain, the identity used is the domain name.

CFor Google Account, Google group, and G suite, the identity used is the domain name, whereas in
service account and cloud identity domain, the identity used is an email address.

DFor Google Account, Google group, and G suite, the identity used is an email address, whereas in
service account and cloud identity domain, the identity used is the domain name.

Show Suggested Answer

Suggested Answer: B

1.Google Cloud IAM Members: In Google Cloud IAM, members can be individuals or entities that interact with Google Cloud resources. These members are assigned roles that grant them permissions to perform specific actions1.

1.Identity Types: The identities used by IAM members to access Google Cloud resources are typically email addresses or domain names, depending on the type of member1.

1.Email Address as Identity: For a Google Account, Google group, and service account, the identity is generally an email address. This email address is used to uniquely identify the member within Google Cloud's IAM system1.

1.Domain Name as Identity: For G Suite and Cloud Identity domains, the identity is the domain name associated with the organization's account. This domain name represents the collective identity of the organization within Google Cloud1.

1.Access to Resources: IAM members use these identities to authenticate and gain access to Google Cloud resources as per the permissions defined by their assigned roles1.

Medium article on IAM Demystified1.

by Glendora at Sep 16, 2024, 08:30 AM

Limited Time Offer

25%

23 days ago

This question is a bit tricky, but I'm going with C. The domain name is used for Google Account, Google group, and G Suite, while the email address is used for service account and cloud identity domain.

upvoted 0 times

Rebecka

1 days ago

I disagree, I believe the correct answer is D. For Google Account, Google group, and G suite, the identity used is an email address, whereas in service account and cloud identity domain, the identity used is the domain name.

upvoted 0 times

...

Yun

14 days ago

I think the answer is B. For Google Account, Google group, and service account, the identity used is an email address, whereas in G Suite and cloud identity domain, the identity used is the domain name.

upvoted 0 times

...

Deeanna

26 days ago

I think the answer is A) For Google Account, Google group, and service account, the identity used is the domain name, whereas in G Suite and cloud identity domain, the identity used is an email address.

upvoted 0 times

...

Jin

26 days ago

Hmm, I'm pretty sure it's D. The domain name is used for Google Account, Google group, and G Suite, while the email address is used for service account and cloud identity domain.

upvoted 0 times

...

Dannette

27 days ago

I think the correct answer is B. The IAM members in Google Cloud use email addresses as their identities, not domain names.

upvoted 0 times

Terrilyn

11 days ago

Yes, that's correct. Email addresses are used as identities for Google Account, Google group, and service account in Google Cloud IAM.

upvoted 0 times

...

Levi

22 days ago

I agree with you, the IAM members in Google Cloud definitely use email addresses as their identities.

upvoted 0 times

...