Configuring access and security
Practise only this domain. 50 questions with explanations, 20 at a time.
Start this domainSample questions
- A security reviewer at a fintech company is reading a project's IAM page and sees the basic roles Editor and Viewer assigned to several accounts. How do these basic roles differ from the granular roles offered for individual services?Medium
- Which identity type lets a workload authenticate to Google Cloud APIs without any human-held password, with Google handling the authentication behind it?Medium
- A finance lead wants a delivery team to link its projects to an existing billing account, but the team must not change the payment method or the account's settings. Which role should be granted on the billing account?Medium
- Which IAM permission allows a user to power on a VM instance that is currently stopped?Easy
- A security reviewer flags a production web tier for running as the project's default compute identity. What is the core concern with this setup?Medium
- A company must reduce the risk from long-lived credentials used by its build system to deploy to Google Cloud. Which practice is the best choice?Easy
- How long does Cloud Logging keep Admin Activity audit entries that land in the default _Required bucket?Hard
- An investigator reviews a suspicious deletion of a Cloud Storage bucket and wants to know what a single administrative audit entry should reveal. Which details are typically present?Easy
- A healthcare startup asks whether it must enable anything before data written to Cloud Storage is encrypted at rest. What is true?Easy