Google Associate Cloud Engineer exam dumps

Google Associate Cloud Engineer practice question 342 of 375

Associate Cloud Engineer. Free level, Google Cloud. Free question with the correct answer and a full explanation.

Google Associate Cloud Engineer Question 342

Select 2Google Cloud Platform

You are the Google Cloud administrator for your organization. The security team has requested that a new IAM role be created to allow users to only view the configurations of Compute Engine instances without allowing them to start or stop instances. Which of the following steps should you take to achieve this?

  1. A

    Create a new custom role with the 'compute.instances.get' permission.

  2. B

    Assign the 'Viewer' predefined role to the users.

  3. C

    Create a new custom role with the 'compute.instances.list' permission.

  4. D

    Create a new custom role with the 'compute.instances.start' and 'compute.instances.stop' permissions.

  5. E

    Use the 'Compute Viewer' predefined role.

Show answer and explanation

Correct answers: A, C

Explanation

To fulfill the requirement of allowing users to view Compute Engine instance configurations without the ability to start or stop them, a custom role should include the 'compute.instances.get' and 'compute.instances.list' permissions. These permissions enable users to access details of instances and list them, which aligns with the viewing requirement. Other roles or permissions either provide broader access or include actions not needed for this task.

  • A. Correct.

    The 'compute.instances.get' permission allows users to view the configurations of specific Compute Engine instances, which is necessary for the requirement.

  • B. Incorrect.

    The 'Viewer' predefined role grants permissions to view resources across all services, not just Compute Engine, which might be more than needed.

  • C. Correct.

    The 'compute.instances.list' permission allows users to list all Compute Engine instances in a project, which is necessary to view configurations.

  • D. Incorrect.

    The 'compute.instances.start' and 'compute.instances.stop' permissions allow users to start and stop instances, which is not required for viewing configurations.

  • E. Incorrect.

    The 'Compute Viewer' predefined role includes permissions beyond just viewing configurations and might allow more actions than required.

Timed practice exam

Take a Google Associate Cloud Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Associate Cloud Engineer practice questions

  1. 343.You are a Google Cloud Associate Cloud Engineer tasked with setting up access controls for a new...
  2. 344.You are tasked with setting up access controls for a new project on Google Cloud Platform. The...
  3. 345.As a Google Cloud Associate Cloud Engineer, you need to create a service account for an application...
  4. 346.As an Associate Cloud Engineer, you need to create a new service account for a web application that...
  5. 347.You are tasked with setting up a new application in Google Cloud Platform (GCP) that requires...
Back to the Google Associate Cloud Engineer exam dumps