Crucial Exams

GCP Associate Cloud Engineer Practice Question

Your organization hires a freelance data analyst who only needs to run queries and view existing datasets in the analytics-prod project's BigQuery service. A project owner proposes simply granting the contractor the IAM role roles/editor at the project level to avoid creating multiple bindings. From an IAM best-practice perspective, how should you classify the roles/editor role that is being suggested?

  • It is a basic IAM role that grants broad permissions across most Google Cloud services, greatly exceeding the contractor's needs.

  • It is a service-account-only role that provides temporary privileges through impersonation rather than direct assignment.

  • It is a predefined BigQuery-specific role that follows least-privilege principles for data analysis tasks.

  • It is a custom role that must be explicitly populated with only BigQuery read-only permissions.

GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot