GCP Professional Cloud Security Engineer Practice Question

Your organization's security team created an Organization-level IAM policy that grants the Security Admins group the roles/accesscontextmanager.policyAdmin role. A project owner later attempts to remove this role from the group at the project level, claiming it is not needed for their workloads. What will be the effective result of this change, and why?

  1. The removal will succeed; project-level bindings override any broader scope bindings, so the group will lose the role in that project.

  2. The removal will fail; bindings inherited from a parent resource cannot be modified lower in the hierarchy, and the group will retain the role.

  3. The removal will succeed, but the group will keep the role because inherited deny rules have higher priority than allow rules.

  4. The removal will succeed, and the group will retain the role until the Organization-level policy is explicitly updated to reflect the change.

  • The removal will succeed, but the group will keep the role because inherited deny rules have higher priority than allow rules.

  • The removal will succeed; project-level bindings override any broader scope bindings, so the group will lose the role in that project.

  • The removal will fail; bindings inherited from a parent resource cannot be modified lower in the hierarchy, and the group will retain the role.

  • The removal will succeed, and the group will retain the role until the Organization-level policy is explicitly updated to reflect the change.

GCP Professional Cloud Security Engineer
Configuring Access
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot