ACE_Workbook_v2-1to20

Stella is a new member of a team in your company who has been put in charge of monitoring VM instances in the organization. Stella will need the required permissions to perform this role. How should you grant her those permissions?

• Assign Stella a roles/compute.viewer role.

• Assign Stella compute.instances.get permissions on all of the projects she needs to monitor.

• Add Stella to a Google Group in your organization. Bind that group to roles/compute.viewer.

• Assign the “viewer” policy to Stella.

How are resource hierarchies organized in Google Cloud?

• Organization, Project, Resource, Folder.

• Organization, Folder, Project, Resource.

• Project, Organization, Folder, Resource.

• Resource, Folder, Organization, Project.

What Google Cloud project attributes can be changed?

• The Project ID.

• The Project Name.

• The Project Number.

• The Project Category.

Jane will manage objects in Cloud Storage for the Cymbal Superstore. She needs to have access to the proper permissions for every project across the organization. What should you do?

• Assign Jane the roles/storage.objectCreator on every project.

• Assign Jane the roles/viewer on each project and the roles/storage.objectCreator for each bucket.

• Assign Jane the roles/editor at the organizational level.

• Add Jane to a group that has the roles/storage.objectAdmin role assigned at the organizational level.

You need to add new groups of employees in Cymbal Superstore’s production environment. You need to consider Google’s recommendation of using least privilege. What should you do?

• Grant the most restrictive basic role to most services, grant predefined or custom roles as necessary.

• Grant predefined and custom roles that provide necessary permissions and grant basic roles only where needed.

• Grant the least restrictive basic roles to most services and grant predefined and custom roles only when necessary.

• Grant custom roles to individual users and implement basic roles at the resource level.

The Operations Department at Cymbal Superstore wants to provide managers access to information about VM usage without allowing them to make changes that would affect the state. You assign them the Compute Engine Viewer role. Which two permissions will they receive?

• compute.images.list

• compute.images.get

• compute.images.create

• compute.images.setIAM

• compute.images.update

How are billing accounts applied to projects in Google Cloud? (Pick two.)

• Set up Cloud Billing to pay for usage costs in Google Cloud projects and Google Workspace accounts.

• A project and its resources can be tied to more than one billing account.

• A billing account can be linked to one or more projects.

• A project and its resources can only be tied to one billing account.

• If your project only uses free resources you don’t need a link to an active billing account.

Fiona is the billing administrator for the project associated with Cymbal Superstore’s eCommerce application. Jeffrey, the marketing department lead, wants to receive emails related to budget alerts. Jeffrey should have access to no additional billing information. What should you do?

• Change the budget alert default threshold rules to include Jeffrey as a recipient.

• Use Cloud Monitoring notification channels to send Jeffrey an email alert.

• Add Jeffrey and Fiona to the budget scope custom email delivery dialog.

• Send alerts to a Pub/Sub topic that Jeffrey is subscribed to.

Pick two choices that provide a command line interface to Google Cloud.

• Google Cloud console

• Cloud Shell

• Cloud Mobile App

• Cloud SDK

• REST-based API

You want to use the Cloud Shell to copy files to your Cloud Storage bucket. Which Cloud SDK command should you use?

• gcloud

• gsutil

• bq

• Cloud Storage Browser