4.1 Managing IAM ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Given the following IAM policy JSON snippet, which member is granted the role 'roles/viewer'?

   • Auser:alice@example.com
   • Bgroup:devs@example.com
   • Cuser:bob@example.com
   • DserviceAccount:sa@project.iam.gserviceaccount.com
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When creating an IAM policy binding using the Cloud Console, which of the following is NOT a required input?

   • AThe condition (e.g., a time-based or resource-based condition).
   • BThe member (e.g., user, group, or service account).
   • CThe role to assign.
   • DThe resource to which the policy applies.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   If a user is granted the role 'roles/editor' at the project level, what access do they have to a Cloud Storage bucket within that project?

   • AThey have the same permissions as defined by 'roles/editor' on the bucket.
   • BThey have full access to the bucket, including the ability to delete it.
   • CThey have read-only access to the bucket.
   • DThey have no access to the bucket unless explicitly granted.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   You have a custom IAM role named 'custom.appDeployer' that is used by a group of developers. You need to make a change to the role's permissions. You are concerned about the impact on the developers if you make a mistake. What is the safest way to test the change before applying it to the production role?

   • ADirectly update the production role and have the developers test it immediately.
   • BDelete the production role and recreate it with the new permissions.
   • CDisable the production role, update it, and then re-enable it.
   • DCreate a new custom role with the proposed permissions, grant it to a test group, and verify the behavior. Then update the production role to match.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which gcloud command adds a member to a role for a project?

   • Agcloud projects add-member PROJECT_ID --user='alice@example.com' --role='roles/viewer'
   • Bgcloud projects add-iam-policy-binding PROJECT_ID --member='user:alice@example.com' --role='roles/viewer'
   • Cgcloud projects set-iam-policy PROJECT_ID --member='user:alice@example.com' --role='roles/viewer'
   • Dgcloud iam add-binding PROJECT_ID --member='user:alice@example.com' --role='roles/viewer'
   Reveal Solution Discussion Select an answer first