
Answer-first summary for fast verification
Answer: Create a folder for each development and production environment., Create a Google Group for the Engineering team, and assign permissions at the folder level.
The question requires efficiently managing IAM permissions for 300 engineers across development and production environments. Option B (creating folders for each environment) is optimal because folders allow hierarchical organization and inheritance of IAM policies, enabling centralized permission management at the environment level. Option C (creating a Google Group for the Engineering team and assigning permissions at the folder level) is also correct because groups simplify user management by allowing bulk permission assignments, reducing administrative overhead for 300 users. The community consensus strongly supports BC, with high upvotes and reasoning that folders provide the structure for environment segregation and groups enable scalable permission assignment. Option A is inefficient as multiple VPCs don't directly address IAM management. Option D is incorrect because Organizational Policies enforce resource constraints, not user permissions. Option E is not scalable, as granting IAM rights individually to 300 users would be cumbersome and error-prone.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
A company has 300 engineers and needs to efficiently manage IAM permissions with different access levels across development and production projects. Which two steps should they take? (Choose two.)
A
Create a project with multiple VPC networks for each environment.
B
Create a folder for each development and production environment.
C
Create a Google Group for the Engineering team, and assign permissions at the folder level.
D
Create an Organizational Policy constraint for each folder environment.
E
Create projects for each environment, and grant IAM rights to each engineering user.
No comments yet.