Configuring access and security

Question 1

You need to configure access to
Spanner from the GKE cluster that is
supporting Cymbal Superstore’s
ecommerce microservices application. You want to specify an account type to set the proper permissions.

What should you do?

Answer 1

A. Assign permissions to a Google account referenced by the application.
B. Assign permissions through a Google Workspace account referenced by the application.
C. Assign permissions through service account referenced by the application.
D. Assign permissions through a Cloud Identity account referenced by the application.

Question 2

You are trying to assign roles to the dev and
prod projects of Cymbal Superstore’s
e-commerce app but are receiving an error when you try to run set-iam policy. The projects are organized into an ecommerce folder in the Cymbal Superstore organizational
hierarchy. You want to follow best practices for the permissions you need while respecting the practice of least privilege.

What should you do?

Answer 2

A. Ask your administrator for
resourcemanager.projects.setIamPolicy roles for each project.
B. Ask your administrator for the
roles/resourcemanager.folderIamAdmin for the ecommerce folder.
C. Ask your administrator for the
roles/resourcemanager.organizationAdmin for Cymbal Superstore.
D. Ask your administrator for the
roles/iam.securityAdmin role in IAM.

Question 3

You have a custom role implemented for administration of the dev/test environment for Cymbal Superstore’s transportation management application. You are developing a
pilot to use Cloud Run instead of Cloud Run functions. You want to ensure your administrators have the correct access to the new resources.

What should you do?

Answer 3

A. Make the change to the custom role locally and run an update on the custom role.
B. Delete the custom role and recreate a new custom role with required permissions.
C. Copy the existing role, add the new
permissions to the copy, and delete the old role.
D. Create a new role with needed permissions and migrate users to it.

Question 4

Which of the scenarios below is an
example of a situation where you
should use a service account?

Answer 4

A. To directly access user data
B. For development environments
C. For interactive analysis
D. For individual GKE pods

Question 5

Cymbal Superstore is implementing a mobile app for end users to track deliveries that are en route to them. The app needs to access data
about truck location from Pub/Sub using Google recommended practices.

What kind of credentials should you use?

Answer 5

A. API key
B. OAuth 2.0 client
C. Environment provided service account
D. Service account key