Google Professional Cloud Security Engineer Question 160
Select 2Google Cloud PlatformYour organization requires that certain administrative tasks in Google Cloud be restricted to privileged roles and only accessible during specific time-bound windows. You need to implement a solution that ensures compliance with this requirement while minimizing the risk of excessive permissions. Which steps should you take to configure Privileged Access Manager (PAM) in this scenario?
- A
Enable Access Approval to require user consent for privileged actions.
- B
Create Access Levels in Access Context Manager to define conditions for elevated access.
- C
Define Just-In-Time (JIT) access policies within Privileged Access Manager.
- D
Integrate Privileged Access Manager with Identity and Access Management (IAM) roles.
- E
Configure time-bound access using Access Context Manager policies.
Show answer and explanation
Correct answers: C, D
Explanation
To meet the organization's requirement for time-bound privileged access, Privileged Access Manager is the appropriate tool. By defining Just-In-Time (JIT) access policies, you can ensure that elevated permissions are granted temporarily and only when necessary. Additionally, integrating PAM with IAM roles enforces privileged access controls effectively. Other options, such as Access Approval or Access Context Manager, do not directly address privileged access or time-bound requirements.
- A. Incorrect.
Access Approval is used to grant permissions for specific API calls or actions, but it is not directly related to configuring privileged access for time-bound tasks.
- B. Incorrect.
Access Levels in Access Context Manager define conditions for access based on attributes like user location or device, but they do not configure privileged access with time-bound restrictions.
- C. Correct.
Just-In-Time (JIT) access policies in Privileged Access Manager allow administrators to grant temporary elevated access to users, aligning with the need for time-bound privileged access.
- D. Correct.
Privileged Access Manager integrates with IAM roles to enforce additional controls on privileged actions, making it a key step for implementing this solution.
- E. Incorrect.
Access Context Manager policies focus on environmental conditions for access, but they do not specifically address privileged access or time-bound restrictions.