Google Cloud Digital Leader — Question 60

Your company security team manages access control to production systems using an LDAP directory group.
How is this access control managed in the Google Cloud production project?

Answer options

• A. Assign the proper role to the Service Account in the project's IAM Policy
• B. Grant each user the roles/iam.serviceAccountUser role on a service account that exists in the Google Group.
• C. Assign the proper role to the Google Group in the project's IAM Policy.
• D. Create the project in a folder with the same name as the LDAP directory group.

Correct answer: C

Explanation

The correct answer is C because assigning the appropriate role to the Google Group in the IAM Policy allows all users within that group to inherit permissions effectively. Options A and B focus on service accounts, which do not manage group-based access directly, and option D does not relate to access control management in IAM.