Google Cloud Certified Associate Cloud Engineer Practice 2026 - Free Cloud Engineer Practice Questions and Study Guide

Get more with Examzify Plus

Remove ads, unlock favorites, save progress, and access premium tools across devices.

FavoritesSave progressAd-free
From $9.99Learn more

1 / 400

You have several users who need access to some very specific Google Cloud functionality. You'd like to follow the principle of least privilege. What's the best way to ensure these users can list Cloud Storage buckets, list BigQuery jobs, and list compute disks?

Add the users to the viewer role.

Use the Cloud Storage Bucket Viewer, BigQuery Job User, and Compute User predefined roles.

Create a custom role for this job role, add the required permissions, and add the users to the role.

Using the predefined roles in B does not ensure least privilege as they may have excess permissions for other resources.

Answer A only grants the Viewer role and does not include the required permissions.

Answer D does not follow the principle of least privilege as the predefined roles have excess permissions. Therefore, creating a custom role in C is the best way to ensure that the specific users have the required permissions without excess access.

Get further explanation with Examzify DeepDiveBeta

Add the users to a group, apply the Cloud Storage Bucket Viewer, BigQuery Job User, and Compute User predefined roles.

Next Question
Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy