Google Cloud Associate Cloud Engineer ACE — Topic 1 Question 302

Question

You are managing the security configuration of your company’s Google Cloud organization. The Operations team needs specific permissions on both a Google Kubernetes Engine (GKE) cluster and a Cloud SQL instance. Two predefined Identity and Access Management (IAM) roles exist that contain a subset of the permissions needed by the team. You need to configure the necessary IAM permissions for this team while following Google-recommended practices. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create a custom IAM role that includes only the required permissions from the predefined roles. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Associate Cloud Engineer ACE — Question 302