Question 234 of 284
Single answerThe DevOps group in your organization needs full control of Compute Engine resources in your development project. However, they should not have permission to create or update any other resources in the project. You want to follow Google’s recommendations for setting permissions for the DevOps group. What should you do?
✓AGrant the basic role roles/viewer and the predefined role roles/compute.admin to the DevOps group.
BCreate an IAM policy and grant all compute.instanceAdmin.* permissions to the policy. Attach the policy to the DevOps group.
CCreate a custom role at the folder level and grant all compute.instanceAdmin.* permissions to the role. Grant the custom role to the DevOps group.
DGrant the basic role roles/editor to the DevOps group.
✓
Correct Answer: A
Grant the basic role roles/viewer and the predefined role roles/compute.admin to the DevOps group.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.