Google Cloud Overview and IAM GCFR Practice Questions (Page 7)

Questions 31–33

1. 31foundation · easy

   In Google Cloud IAM, how are permissions granted to a principal?

   • ABy attaching a role to the principal through an IAM policy binding
   • BBy directly assigning individual permissions to the principal
   • CBy adding the principal to the project's default network
   • DBy creating a service account key and sharing it with the principal
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   In the context of IAM best practices for forensics, what is the purpose of separation of duties?

   • ATo separate the forensic investigation from the incident response process
   • BTo ensure that no single individual has the ability to both perform and conceal an action
   • CTo ensure that all investigators have identical permissions for consistency
   • DTo allow multiple investigators to work on the same evidence simultaneously
   Reveal Solution Discussion Select an answer first
3. 33foundation · easy

   When investigating a potential IAM breach, which information would you expect to find in Cloud Audit Logs?

   • AThe full contents of all files stored in Cloud Storage buckets
   • BThe password hashes of all users in the organization
   • CThe private keys of all service accounts in the project
   • DThe identity of the principal who made the IAM change and the timestamp of the change
   Reveal Solution Discussion Select an answer first