Practice Test 2 | Google Cloud Certified Associate Cloud Engineer | Dumps | Mock Test
You are appointed as a head of infrastructure security and the first thing you are asked is to create few IAM users following best security practices. How would you ensure that these users are only able to launch a new instance and list them?
A. Create Compute Editor role and attach to the users.
B. Attach Project Editor role to users.
C. Create custom role with specific permissions and attach it to users.
D. Create a service account with required permissions and attach it to users.
Explanation:
Answer C
Option C is correct: You should always follow least privilege principle and assign permission to any resource. Keeping this in mind it is recommended to create custom role and attach it to users.
Option A is incorrect: Compute Editor role will provide many extra permissions other than just launching and list instances.
Option B is incorrect: Project Editor role will allow users to access all the resources with a project and this is not best security practise.
Option D is incorrect: You cannot attach a service account to user.
Link:
https://cloud.google.com/sdk/gcloud/reference/app/deploy
Comments are closed, but trackbacks and pingbacks are open.