🔥 40% Off Crucial Exams Memberships — Deal ends today!

45 minutes, 56 seconds remaining!
Crucial Exams

GCP Associate Cloud Engineer Practice Question

Your operations team occasionally needs to manually start and stop development VM instances during off-hours incidents. They must not create, delete, or reconfigure any Compute Engine resources. Which IAM strategy best enforces the principle of least privilege for these engineers?

  • Grant the engineers both roles/compute.viewer and roles/iam.serviceAccountUser on the project.

  • Create a custom role containing only compute.instances.start and compute.instances.stop, then bind that role to the engineers on the project.

  • Make the engineers project Owners on the development project only.

  • Grant the engineers the predefined role roles/compute.instanceAdmin.v1 on the project.

GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot