GCP Associate Cloud Engineer Practice Question

Your organization recently adopted Cloud Identity. You need to onboard a contractor today and immediately place the account in the existing [email protected] group so it inherits that group's IAM privileges. You must work only through web consoles (no command-line or sync tools) and ensure the contractor is given a temporary password for first sign-in. Which sequence of actions will meet these requirements?

Create a service account named contractor in the Cloud console and add that service account to the [email protected] group; send the generated JSON key to the contractor for sign-in.
Use Cloud Shell to run gcloud identity users create with the --auto-password flag, then run gcloud identity groups memberships add to insert the account into [email protected].
Open IAM & Admin in the Google Cloud console, click Grant access, enter the contractor's Gmail address, assign Viewer role, and rely on automatic propagation to the [email protected] group.
In the Admin console, open Directory > Users, click Add new user, set or generate a temporary password, then open Directory > Groups, select [email protected], choose Add members, and add the new user account.

Report Issue

Answer Description

The correct approach is to use the Google Admin console, which is the UI for manually managing identities and groups. From Directory > Users, choose Add new user, enter the contractor's details, and either create or let the console generate a temporary password for the account. The Admin console does not email this password automatically; you can copy it or choose to send sign-in instructions manually. To assign group membership, navigate to Directory > Groups, open [email protected], select Members, and choose Add members to include the new user. The other options fail because they rely on command-line tools (not permitted), mistakenly use the Google Cloud IAM page (which cannot create Cloud Identity users or manage group membership), or create a service account instead of a human user and therefore do not satisfy the temporary-password requirement.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.