🔥 40% Off Crucial Exams Memberships — Deal ends today!

44 minutes, 56 seconds remaining!
Crucial Exams

GCP Associate Cloud Engineer Practice Question

A user-managed service account named checkout-sa is used by production workloads. Lisa already has the Compute Instance Admin role on the project, but when she tries to create a new Compute Engine VM that uses checkout-sa she receives a permission denied error. You must allow Lisa to attach checkout-sa to VMs without giving her any additional permissions on other resources or changing the service account's own access. Which IAM binding satisfies the requirement?

  • Grant [email protected] the Service Account User role (roles/iam.serviceAccountUser) on checkout-sa.

  • Grant [email protected] the IAM Security Reviewer role (roles/iam.securityReviewer) at the project level.

  • Grant checkout-sa the Service Account Token Creator role (roles/iam.serviceAccountTokenCreator) on the project.

  • Grant [email protected] the Storage Object Viewer role (roles/storage.objectViewer) on checkout-sa.

GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot