Eccouncil Exam 312-40 Topic 10 Question 16 Discussion

Actual exam question for Eccouncil's 312-40 exam

Question #: 16
Topic #: 10

Jordon Bridges works as a cloud security engineer in a multinational company. His organization uses Google cloud-based services (GC) because Google cloud provides robust security services, better pricing than competitors, improved performance, and redundant backup. Using IAM security configuration, Jordon implemented the principle of least privilege. A GC IAM member could be a Google account, service account, Google group, G Suite, or cloud identity domain with an identity to access Google cloud resources. Which of the following identities is used by GC IAM members to access Google cloud resources?

AFor Google Account, Google group, and service account, the identity used is the domain name,
whereas in G Suite and cloud identity domain, the identity used is an email address.

BFor Google Account, Google group, and service account, the identity used is an email address,
whereas in G Suite and cloud identity domain, the identity used is the domain name.

CFor Google Account, Google group, and G suite, the identity used is the domain name, whereas in
service account and cloud identity domain, the identity used is an email address.

DFor Google Account, Google group, and G suite, the identity used is an email address, whereas in
service account and cloud identity domain, the identity used is the domain name.

Show Suggested Answer

Suggested Answer: B

1.Google Cloud IAM Members: In Google Cloud IAM, members can be individuals or entities that interact with Google Cloud resources. These members are assigned roles that grant them permissions to perform specific actions1.

1.Identity Types: The identities used by IAM members to access Google Cloud resources are typically email addresses or domain names, depending on the type of member1.

1.Email Address as Identity: For a Google Account, Google group, and service account, the identity is generally an email address. This email address is used to uniquely identify the member within Google Cloud's IAM system1.

1.Domain Name as Identity: For G Suite and Cloud Identity domains, the identity is the domain name associated with the organization's account. This domain name represents the collective identity of the organization within Google Cloud1.

1.Access to Resources: IAM members use these identities to authenticate and gain access to Google Cloud resources as per the permissions defined by their assigned roles1.

Medium article on IAM Demystified1.

by Glendora at Sep 16, 2024, 08:30 AM

Limited Time Offer

25%

Off

Get Premium 312-40 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Whitley

3 months ago

What a weird question. Do people actually use domain names to access Google Cloud resources? I'm going with B.

upvoted 0 times

Augustine

2 months ago

I agree, using email addresses seems more practical. I'll go with B too.

upvoted 0 times

...

Craig

2 months ago

I'm not sure about that, I believe it's more common to use email addresses. I'll choose B.

upvoted 0 times

...

Marge

2 months ago

I think people actually do use domain names to access Google Cloud resources. I'm going with A.

upvoted 0 times

...

Valentin

3 months ago

I'm with Deeanna on this one. A) makes more sense to me because it aligns with how Jordon implemented the principle of least privilege using IAM security configuration.

upvoted 0 times

...

Joesph

3 months ago

Haha, this question reminds me of the time I accidentally gave my email address as a domain name. Anyway, I think the answer is B.

upvoted 0 times

...

Shawana

3 months ago

I disagree, I believe the correct answer is B) For Google Account, Google group, and service account, the identity used is an email address, whereas in G Suite and cloud identity domain, the identity used is the domain name.

upvoted 0 times

...

Blondell

3 months ago

This question is a bit tricky, but I'm going with C. The domain name is used for Google Account, Google group, and G Suite, while the email address is used for service account and cloud identity domain.

upvoted 0 times

Filiberto

2 months ago

Hmm, this is a tough one. I'm going to go with A. For Google Account, Google group, and service account, the identity used is the domain name, whereas in G Suite and cloud identity domain, the identity used is an email address.

upvoted 0 times

...

Shawnda

2 months ago

I see your point, but I still think C is the right answer. For Google Account, Google group, and G suite, the identity used is the domain name, whereas in service account and cloud identity domain, the identity used is an email address.

upvoted 0 times

...

Rebecka

2 months ago

I disagree, I believe the correct answer is D. For Google Account, Google group, and G suite, the identity used is an email address, whereas in service account and cloud identity domain, the identity used is the domain name.

upvoted 0 times

...

Yun

2 months ago

I think the answer is B. For Google Account, Google group, and service account, the identity used is an email address, whereas in G Suite and cloud identity domain, the identity used is the domain name.

upvoted 0 times

...

Deeanna

3 months ago

I think the answer is A) For Google Account, Google group, and service account, the identity used is the domain name, whereas in G Suite and cloud identity domain, the identity used is an email address.

upvoted 0 times

...

Jin

3 months ago

Hmm, I'm pretty sure it's D. The domain name is used for Google Account, Google group, and G Suite, while the email address is used for service account and cloud identity domain.

upvoted 0 times

...

Dannette

3 months ago

I think the correct answer is B. The IAM members in Google Cloud use email addresses as their identities, not domain names.

upvoted 0 times

Terrilyn

2 months ago

Yes, that's correct. Email addresses are used as identities for Google Account, Google group, and service account in Google Cloud IAM.

upvoted 0 times

...

Levi

3 months ago

I agree with you, the IAM members in Google Cloud definitely use email addresses as their identities.

upvoted 0 times

...