Correct Answer: A role created and maintained by Google that provides granular permissions for a specific service (e.g., Storage Object Viewer)
Predefined roles are the recommended way to follow the principle of least privilege....
Correct Answer
A role created and maintained by Google that provides granular permissions for a specific service (e.g., Storage Object Viewer)
Why This Answer Is Correct
Predefined roles are the recommended way to follow the principle of least privilege.
This question evaluates your knowledge of Cloud IAM — a core concept tested in Associate Cloud Engineer. Understanding Cloud IAM is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
Which IAM role is required to create and manage service accounts in a Google Cloud project?
What is the best practice for granting permissions in Google Cloud?
Which IAM entity is a special type of account used by an application or a virtual machine to make authorized API calls?
Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Cloud IAM feature should you use?
Which IAM identity type is intended for non-human users, such as applications or virtual machines, to authenticate with Google Cloud APIs?