Question

Difficulty: HardManaging and Requesting GCP Resource Quotas

A lead cloud engineer at a financial firm is preparing to launch a risk-modeling batch processing cluster in project `risk-analytics-prod`. The workload requires provisioning 128 N2 CPUs in the `us-west1` region, but deployment fails because the project's current regional limit is 32 N2 CPUs. The engineer must request an adjustment to accommodate the workload using the principle of least privilege. Which action should be taken to request the required capacity increase?

  1. Grant the engineer the Quota Administrator role (`roles/servicemanagement.quotaAdmin`) on the project, and submit a quota increase request from the Quotas & System Limits page in the Cloud Console.Answer
  2. B
    Increase the monthly credit limit on the project's Cloud Billing account and set up a budget alert threshold to automatically raise CPU allocations when utilization reaches 80%.
  3. C
    Grant the engineer the Billing Account Administrator role (`roles/billing.admin`) on the linked billing account, and modify the project's regional resource limits inside the Billing Console.
  4. D
    Provision additional sub-projects under the same organization folder, as regional Compute Engine CPU quotas automatically aggregate across all projects under a shared parent folder.

Answer

Grant the engineer the Quota Administrator role (`roles/servicemanagement.quotaAdmin`) on the project, and submit a quota increase request from the Quotas & System Limits page in the Cloud Console.
The correct solution uses the principle of least privilege by granting the Quota Administrator role (`roles/servicemanagement.quotaAdmin`), which enables the engineer to view and request quota increases directly through the Quotas & System Limits interface in the Google Cloud Console.

Step-by-Step Solution

1
Identify the required administrative role for quota management.
Following the principle of least privilege, `roles/servicemanagement.quotaAdmin` provides the necessary permissions to view and request quota changes without granting full project ownership.
Primitive roles like Owner grant excessive privileges, while specific quota administrative permissions allow quota adjustment requests.
2
Navigate to the GCP resource management console interface.
Access the IAM & Admin > Quotas & System Limits section in the Google Cloud Console.
GCP resource quotas (such as Compute Engine N2 CPUs in `us-west1`) are monitored and requested via the Quotas interface.
3
Submit the regional CPU quota adjustment request.
Select the N2 CPUs metric for `us-west1` and submit a quota edit request with business justification for evaluation by Google Cloud.
GCP reviews and approves quota increase requests based on project usage, payment history, and resource availability.

Key Concept

GCP Resource Quota Management and IAM Quota Administrator Role
Rate this question