Google Cloud Associate Cloud Engineer ACE — Topic 1 Question 332

Question

You manage IAM policies for your organization’s Google Cloud project. A new operations team needs the capability to start, stop, and reset existing Compute Engine VM instances within this project for basic troubleshooting. Due to strict security requirements, the operations team must be prevented from deleting any instances or modifying any networking or configuration settings. You need to grant the minimum necessary permissions to the team members. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Create a custom IAM role that includes only the compute.instances.start, compute.instances.stop, and compute.instances.reset permissions. Assign this role to the operations team on the project. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Associate Cloud Engineer ACE — Question 332