Exam Associate Cloud Engineer All Questions

View all questions & answers for the Associate Cloud Engineer exam

Exam Associate Cloud Engineer topic 1 question 104 discussion

Actual exam question from Google's Associate Cloud Engineer

Question #: 104
Topic #: 1

[All Associate Cloud Engineer Questions]

Your company set up a complex organizational structure on Google Cloud. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members, and you want to follow Google-recommended practices. What should you do?

A. Add the users to roles/browser role.
B. Add the users to roles/iam.roleViewer role.
C. Add the users to a group, and add this group to roles/browser.
D. Add the users to a group, and add this group to roles/iam.roleViewer role.

Show Suggested Answer

Suggested Answer: C 🗳️

by SIX at June 6, 2020, 4:42 p.m.

Comments

Submit Cancel

ESP_SAP

Highly Voted 4 years, 11 months ago

Correct Answer is (C): We need to apply the GCP Best practices. roles/browser Browser Read access to browse the hierarchy for a project, including the folder, organization, and IAM policy. This role doesn't include permission to view resources in the project. https://cloud.google.com/iam/docs/understanding-roles

upvoted 32 times

...

SIX

Highly Voted 5 years, 2 months ago

C is the better answer.

upvoted 31 times

...

Ciupaz

Most Recent 9 months ago

Selected Answer: A

Directly assigning the roles/browser role to users (answer A) is a simpler and more immediate solution, without the need to manage groups, which reduces administrative complexity.

upvoted 1 times

...

ccpmad

1 year, 2 months ago

Selected Answer: C

(roles/browser) Read access to browse the hierarchy for a project, including the folder, organization, and allow policy. This role doesn't include permission to view resources in the project. https://cloud.google.com/resource-manager/docs/access-control-proj#browser To view, only, "view the hierarchical structure", C. But with browser role they will not be able to view resources, only the structure.

upvoted 1 times

...

zangetsu2

1 year, 6 months ago

Selected Answer: C

https://cloud.google.com/iam/docs/understanding-roles#browser

upvoted 1 times

...

AndyMandy

1 year, 7 months ago

Selected Answer: D

https://cloud.google.com/iam/docs/understanding-roles

upvoted 1 times

...

nathanBK

1 year, 8 months ago

Selected Answer: C

The correct answer is D. Add the users to a group, and add this group to roles/iam.roleViewer role. This approach follows Google-recommended practices by utilizing IAM groups to manage user permissions and ensure granular control over access to the organizational structure. By adding users to a group and assigning the roles/iam.roleViewer role to the group, you can effectively grant the necessary permissions to view the hierarchical structure while minimizing the scope of access.

upvoted 1 times

...

BAofBK

1 year, 9 months ago

The answer is D

upvoted 1 times

...

scanner2

1 year, 11 months ago

Selected Answer: C

C is the correct answer. https://cloud.google.com/iam/docs/understanding-roles#browser

upvoted 1 times

...

Captain1212

1 year, 11 months ago

Selected Answer: C

C is the correct answer

upvoted 1 times

...

Neha_Pallavi

1 year, 11 months ago

C. Add the users to a group, and add this group to roles/browser.

upvoted 1 times

...

Ash_34

2 years ago

Selected Answer: C

C is the answer, Browser - Read access to browse the hierarchy for a project, including the folder, organization, and allow policy

upvoted 1 times

...

sabrinakloud

2 years, 3 months ago

Selected Answer: C

C is correct

upvoted 1 times

...

Charumathi

2 years, 10 months ago

C is the correct answer, ID roles/browser Role launch stage General Availability Description Access to browse GCP resources. 6 assigned permissions resourcemanager.folders.get resourcemanager.folders.list resourcemanager.organizations.get resourcemanager.projects.get resourcemanager.projects.getIamPolicy resourcemanager.projects.list

upvoted 2 times

...