Correct Answer: Create an Cloud IAM policy with Google Cloud Storage read permissions and attach it to a group
Cloud IAM allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management....
Correct Answer
Create an Cloud IAM policy with Google Cloud Storage read permissions and attach it to a group
Why This Answer Is Correct
Cloud IAM allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
This question evaluates your knowledge of Google Cloud Storage — a core concept tested in Professional Cloud DevOps Engineer. Understanding Google Cloud Storage is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
You need to host a static website (HTML, CSS, JS) with the lowest possible cost and high durability. You do not need server-side processing. Which storage solution should you choose?
You need to grant developers read-only access to Google Cloud Storage buckets without giving them access to other services. What's the best approach using Cloud IAM?
Which Cloud Storage class is optimized for data that is accessed at most once a year, such as long-term backups for compliance?
What is 'Object Lifecycle Management' in Cloud Storage used for?
Which Cloud Storage feature allows you to restrict access to objects in a bucket so that they are only accessible via a signed URL that expires after a certain time?