1. True or False: In Google Cloud IAM: if a policy applied at the project level gives you Owner permissions, your access to an individual resource in that project might be restricted to View permission if someone applies a more restrictive policy directly to that resource.
False : Correct! Policies are a union of those applied on resource itself and those inherited from higher levels in the hierarchy. If a parent policy is less restrictive, it overrides a more restrictive policy applied on the resource. If a parent policy is more restrictive, it does not override a less restrictive policy applied on the resource. Therefore, access granted at a higher level in the hierarchy cannot be taken away by policies applied at a lower level in the hierarchy.
2. True or False: All Google Cloud Platform resources are associated with a project.
True : Correct! All Google Cloud Platform resources are associated with a project.
3. Service accounts are used to provide which of the following? (Choose all that are correct. Choose 3 responses.)
A way to restrict the actions a resource (such as a VM) can perform
Authentication between Google Cloud Platform services
A way to allow users to act with service account permissions
4. How do GCP customers and Google Cloud Platform divide responsibility for security?
Google takes care of the lower parts of the stack, and customers are responsible for the higher parts.
5. Which of these values is globally unique, permanent, and unchangeable, but chosen by the customer?
The project ID
6. Consider a single hierarchy of GCP resources. Which of these situations is possible? (Choose all that are correct. Choose 3 responses.)
There is no organization node, and there are no folders.
There is an organization node, and there are no folders.
There is an organization node, and there is at least one folder.
7. What is the difference between IAM primitive roles and IAM predefined roles?
Primitive roles affect all resources in a GCP project. Predefined roles apply to a particular service in a project.
8. Which statement is true about billing for solutions deployed using Cloud Marketplace (formerly known as Cloud Launcher)?
You pay only for the underlying GCP resources you use, with the possible addition of extra fees for commercially licensed software.
0개의 댓글