Get startedGet started for free

Quiz: Security Best Practices in Google Cloud: Models — Question 2

A user attempts to trick the Cymbal Advisor agent into deleting an old trading log. However, the agent's dedicated IAM service account only has roles/logging.viewer and roles/bigquery.dataViewer permissions. The delete action on Cloud Logging is blocked. Which principle saved the day?

This exercise is part of the course

Security Best Practices in Google Cloud: Models

View Course

Hands-on interactive exercise

Turn theory into action with one of our interactive exercises

Start Exercise