Diagnostic questions
Your score: 100% Passing score: 75%
Congratulations! You passed this assessment.
Retake
check
1.
Stella is a new member of a team in your company who has been put in charge of monitoring
VM instances in the organization. Stella will need the required permissions to perform this role.
How should you grant her those permissions?
checkAdd Stella to a Google Group in your organization. Bind that group to
roles/compute.viewer.
Assign Stella compute.instances.get permissions on all of the projects she needs to
monitor.
Assign the “viewer” policy to Stella.
Assign Stella a roles/compute.viewer role.
Correct! Best practice is to manage role assignment by groups, not by individual users.
check
2.
Pick two choices, from the options below, that provide a command line interface to Google
Cloud.
Cloud Mobile App
Check Cloud Shell
Correct! Cloud Shell provides a cloud-based CLI environment.
REST-based API
Check Cloud SDK
Correct! The Cloud SDK provides a local CLI environment.
Google Cloud console
check
3.
Fiona is the billing administrator for the project associated with Cymbal Superstore’s
eCommerce application. Jeffrey, the marketing department lead, wants to receive emails related
to budget alerts. Jeffrey should have access to no additional billing information. What should you
do?
Add Jeffrey and Fiona to the budget scope custom email delivery dialog.
checkUse Cloud Monitoring notification channels to send Jeffrey an email alert.
Send alerts to a Pub/Sub topic that Jeffrey is subscribed to.
Change the budget alert default threshold rules to include Jeffrey as a recipient.
Correct! You can set up to 5 Cloud Monitoring channels to define email recipients that
will receive budget alerts.
check
4.
How are billing accounts applied to projects in Google Cloud? (Pick two).
checkA billing account can be linked to one or more projects.
Correct! A billing account can handle billing for more than one project.
A project and its resources can be tied to more than one billing account.
checkA project and its resources can only be tied to one billing account.
Correct! A project can only be linked to one billing account at a time.
Set up Cloud Billing to pay for usage costs in Google Cloud projects and Google
Workspace accounts.
check
5.
The Operations Department at Cymbal Superstore wants to provide managers access to
information about VM usage without allowing them to make changes that would affect the state.
You assign them the Compute Engine Viewer role. Which two permissions will they receive?
compute.images.create
checkcompute.images.get
Correct! Get is read-only. Viewer has this permission.
computer.images.update
compute.images.setIAM
checkcompute.images.list
Correct! Viewers can perform read-only actions that do not affect state.
check
6.
You need to add new groups of employees in Cymbal Superstore’s production environment. You
need to consider Google’s recommendation of using least privilege. What should you do?
Grant the least restrictive basic roles to most services and grant predefined and
custom roles only when necessary.
checkGrant predefined and custom roles that provide necessary permissions and grant
basic roles only where needed.
Grant custom roles to individual users and implement basic roles at the resource
level.
Grant the most restrictive basic role to most services, grant predefined or custom
roles as necessary.
Correct! Basic roles are broad and don’t use the concept of least privilege. You should
grant only the roles that someone needs through predefined and custom roles.
check
7.
What Google Cloud project attributes can be changed?
The Project Number.
checkThe Project Name.
The Project Category.
The Project ID.
Correct! Project name is set by the user at creation. It does not have to be unique. It
can be changed after creation time.
check
8.
You want to use the Cloud Shell to copy files to your Cloud Storage bucket. Which Cloud SDK
command should you use?
bq
checkgsutil
Cloud Storage Browser
gcloud
Correct! Use gsutil to interact with Cloud Storage via the Cloud SDK.
check
9.
Jane will manage objects in Cloud Storage for the Cymbal Superstore. She needs to have access
to the proper permissions for every project across the organization. What should you do?
Assign Jane the roles/editor at the organizational level.
Assign Jane the roles/viewer on each project and the roles/storage.objectCreator for
each bucket.
checkAdd Jane to a group that has the roles/storage.objectAdmin role assigned at the
organizational level.
Assign Jane the roles/storage.objectCreator on every project.
Correct! This would give Jane the right level of access across all projects in your
company.
check
10.
How are resource hierarchies organized in Google Cloud?
Project, Organization, Folder, Resource
checkOrganization, Folder, Project, Resource
Resource, Folder, Organization, Project
Organization, Project, Resource, Folder
Correct! Organization sits at the top of the Google Cloud resource hierarchy. This can
be divided into folders, which are optional. Next, there are projects you define. Finally,
resources are created under projects.
