PCNE Question 11

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  The correct answer is A. Security Admin privileges from the Shared VPC Admin. Since you currently have Network Admin permissions, which do not allow modification of firewall rules, you should request Security Admin privileges. This will give you the necessary permissions to manage and update firewall rules in the Shared VPC while following the least privilege principle. This ensures that you have just the required level of access without unnecessary permissions.

• Chose B1

  Service Project Admin privileges provide you with the necessary permissions to manage resources within a service project, including managing firewall rules associated with that project. This adheres to the least privilege principle because you're only requesting the minimal set of permissions to manage firewall rules within your assigned service project.

• Chose A1

  Choose option A. Explanation: Security Admin Role: The Security Admin role is specific to managing firewall rules and network-related permissions within a project. It allows you to manage firewall rules, among other network-related configurations. Shared VPC Admin: Shared VPC Admin has broader permissions, including the ability to manage shared VPC configurations, but it may grant more permissions than necessary for managing firewall rules. Options B, C, and D provide broader permissions than necessary for the task of updating firewall rules within a shared VPC: Therefore, option A is the most specific and least privileged option for managing firewall rules within the shared VPC context.