Google Updated Cloud-Digital-Leader Exam Questions and Answers by simon

https://www.crowdstrike.com/cybersecurity-101/zero-trust-security/

Zero Trust is a security framework requiring all users, whether in or outside the organization’s network, to be authenticated, authorized, and continuously validated for security configuration and posture before being granted or keeping access to applications and data

The correct answer is B. Least privilege. Here's why:

Context of the Question: The organization wants to ensure that users are granted only the permissions required for their job responsibilities, aligning with a specific security principle.

Google Cloud Product Relevance:

The Least Privilege principle is a fundamental security concept that dictates that users should be given the minimum level of access—or permissions—necessary to perform their job functions. This reduces the risk of unauthorized access and potential security breaches.

In Google Cloud, Identity and Access Management (IAM) can be used to implement the least privilege principle by assigning roles and permissions that are tightly scoped to users' specific responsibilities.

Why Not Other Options:

A. Security by default: This is a general security approach where security settings are enabled by default, but it does not specifically address access control.

C. Zero-trust: Zero-trust is a broader security model that assumes no implicit trust within a network; it complements but does not replace the least privilege approach.

D. Cyber resilience: This refers to an organization’s ability to continue operations during a cyber incident, which is different from granting minimal permissions.

Google Cloud Digital Leader References:

Refer to Google Cloud IAM documentation for more information on implementing the principle of least privilege in Google Cloud.