Crucial Exams

GCP Associate Cloud Engineer Practice Question

An administrator needs to let an operations engineer start and stop Compute Engine VM instances in the prod-project. They try to update the project's IAM policy with the following YAML snippet:

gcloud projects set-iam-policy returns an "invalid argument" error. Which statement best explains why this binding is rejected?

  • Fine-grained permissions can only be applied after the user receives the legacy Editor role, which is missing in the binding.

  • The permissions are written with dot notation; IAM requires snake_case identifiers in the role field, causing the command to fail.

  • Start and stop permissions are resource-specific and can only be granted on each VM instance, not at the project level, so the project-level binding fails.

  • IAM bindings can reference only a single role name; you must grant a predefined or custom role that contains the start and stop permissions instead of listing permissions directly.

GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot