🔥 40% Off Crucial Exams Memberships — Deal ends today!

44 minutes, 59 seconds remaining!

GCP Associate Cloud Engineer Practice Question

Your team is configuring a Compute Engine VM that will only read objects from a single Cloud Storage bucket. The VM runs under a new user-managed service account. To follow the principle of least privilege, which IAM grant should you create?

  • Grant the project's default Compute Engine service account the Owner role on the project.

  • Grant the service account the Storage Admin role on the project.

  • Grant the service account the Editor role on the project.

  • Grant the service account the Storage Object Viewer role on the bucket.

GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot