Practice Test 3 | Google Cloud Certified Associate Cloud Engineer | Dumps | Mock Test
Using the principle of least privilege, your colleague Bob needs to be able to create new instances on Compute Engine in project ‘Project A’. How should you give him access without giving more permissions than is necessary?
A. Give Bob Compute Engine Instance Admin Role for Project A.
B. Give Bob Compute Engine Admin Role for Project A.
C. Create a shared VPC that Bob can access Compute resources from.
D. Give Bob Project Editor IAM role for Project A.
Explanation:
Correct answer A
A (Correct answer) – Give Bob Compute Engine Instance Admin Role for Project A – The Compute Engine Instance Admin role only gives access to create/edit compute engine resources such as instances, disks, and snapshots.
B – Give Bob Compute Engine Admin Role for Project A – The Compute Engine Admin role also gives admin access to network resources as well, which is too much.
C – Create a shared VPC that Bob can access Compute resources from – shared VPC is not for granting user role. For example, even if you create shared VPC between “Project A” and “Project B”, to meet the requirement, you still need to grant Bob Compute Engine Instance Admin Role for Project A.
D – Give Bob Project Editor IAM role for Project A – that’ll be too much for create new instances on Compute Engine in project ‘Project A’
Comments are closed, but trackbacks and pingbacks are open.