Practice Test 2 | Google Cloud Certified Professional Cloud Network Engineer | Dumps | Mock Test
You are responsible for defining the permissions of a google group for network security admins at a folder level in a GCP Organization. The team need to be able create, delete firewall rules, manage SSL Certificates and SSL Policies only. Following GCP best practices, which role should you assign to the group.
A. Compute Network User predefined role.
B. Compute Security Admin predefined role.
C. Compute Network Admin predefined role.
D. A custom role with the permissions compute.firewalls.*, compute.sslPolicies.*, compute.sslCertificates.*, compute.networks.list, and compute.projects.get
Answer: D
Option A is incorrect, it does not have the needed permissions.
Option B is incorrect, it the needed permission and a lot more permissions than is needed
Option C is incorrect, it does not have all the permissions needed.
Option D is correct, this has the right amount of permissions needed for the group to carry out its duties. It follows the principle of least privilege.
https://cloud.google.com/compute/docs/access/iam#compute.networkAdmin has a list of the permissions for the Compute Network Admin.
https://cloud.google.com/compute/docs/access/iam#compute.networkUser has a list of the permissions for the Compute Network User.
https://cloud.google.com/compute/docs/access/iam#compute.securityAdmin has a list of the permissions for the Compute Security Admin.
Comments are closed, but trackbacks and pingbacks are open.