Google Associate-Cloud-Engineer Quiz 11 Topic 2 Questions 51-55

Question: 1

You've created a new "Custom Role" for a specific new job role inside your company. The role consisted of several permissions; some had a status of "Supported" others a status of "Testing." The role has been working for weeks; however, some permissions recently stopped working. What is the most likely cause for this?

AThe custom role has reached its expiration period.

BThe latest Google applied updates reset all of the custom roles.

COne or more permissions with a status of 'Testing' have changed.

DYour account has been compromised by hackers.

Show Answer

Question: 2

You've been asked to add a new IAM member and grant them access to run some queries on BigQuery. Considering the principle of least privilege, which role should you assign?

Aroles/bigquery.dataViewer and roles/bigquery.jobUser

BProject Editor

Croles/bigquery.admin

Droles/bigquery.dataOwner

Show Answer

Question: 3

Your boss has asked you to onboard a new user and provide them with access to their team's project. What set of steps best describes what needs to happen?

AAdd them as a member of the project, grant them the required roles, and sync the user back to G Suite.

BAdd the user inside of G Suite, create a user group, and add them to that user group.

CAdd the user inside of G Suite; sync from G Suite to the Active Directory using the Directory Sync util; add them as a member and grant them the required roles.

DAdd the user inside of G Suite, add them as a member of the project, and grant them the required roles.

Show Answer

Question: 4

You've setup and tested several custom roles in your development project. What is the fastest way to create the same roles for your new production project?

ARecreate them in the new project.

BUse the gcloud iam copy roles command and set the destination project.

CIn the UI, select the roles and click the Export button.

DUse the gcloud iam roles copy command and set the destination project.

Show Answer

Question: 5

Regarding audit logs, which of the following is a Google recommended best practice?

AExport your audit logs to App Engine

BExport your audit logs to Pub/Sub.

CFlush your audit logs monthly so you can more easily notice security events.

DExport your audit logs to Cloud Storage and store them for a long period of time.

Show Answer

You've been asked to add a new IAM member and grant them access to run some queries on BigQuery. Considering the principle of least privilege, which role should you assign?

Your boss has asked you to onboard a new user and provide them with access to their team's project. What set of steps best describes what needs to happen?

You've setup and tested several custom roles in your development project. What is the fastest way to create the same roles for your new production project?

Regarding audit logs, which of the following is a Google recommended best practice?

Google Associate-Cloud-Engineer Quiz:11 Topic:2 Questions:51-55