Answer-first summary for fast verification
Answer: Assign each user the compute.networkAdmin role.
The principle of least privilege requires granting only the permissions necessary to perform a task. In this scenario, the task involves creating, modifying, and deleting Cloud Interconnect VLAN attachments. The compute.networkAdmin role is the most appropriate predefined role that includes all the necessary permissions for these actions without being overly permissive like the editor role. Options C and D do not provide all the required permissions for modifying and deleting VLAN attachments, making them insufficient for the task at hand.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
You need to grant each member of your network operations team the minimum required permissions to create, update, and delete Cloud Interconnect VLAN attachments.
What is the recommended approach to achieve this?
A
Assign each user the editor role.
B
Assign each user the compute.networkAdmin role.
C
Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get.
D
Give each user the following permissions only: compute.interconnectAttachments.create, compute.interconnectAttachments.get, compute.routers.create, compute.routers.get, compute.routers.update.
No comments yet.