Jordon Bridges works as a cloud security engineer in a multinational company. His organization uses Google cloud-based services (GC) because Google…

In Google Cloud IAM, different types of members are identified in specific ways. An identity is verified for a member before they can be granted a role. For members that represent an individual user or a collection of users (Google Account, service account, Google group), the identity is an email address. For members that represent an entire collection of users within an organization (G Suite or Cloud Identity domain), the identity is the domain name itself. Option B correctly distinguishes between these two categories of identities.

A. This option incorrectly reverses the identities; it claims domain names are used for accounts/groups and emails for domains.
C. This option incorrectly groups G Suite with accounts/groups and service accounts with domains, which is not how identities are structured.
D. This option incorrectly groups G Suite with accounts/groups and service accounts with domains, mixing up the identity types.

1. Google Cloud. (n.d.). Overview of IAM. Google Cloud Documentation. Retrieved from https://cloud.google.com/iam/docs/overview. In the section "Concepts related to identity," it specifies the different member types: "Google Account: A user... identified by an email address," "Service account: An account for an application... identified by its email address," "Google group: A named collection of Google Accounts... identified by an email address," and "Google Workspace or Cloud Identity domain: ...identified by its domain name."