Examkin

Soru

Zorluk: OrtaManaging and Requesting GCP Resource Quotas

An organization wants to delegate resource quota management responsibilities for a production Google Cloud project to a junior operations analyst. The analyst must be able to view current resource quotas and submit formal quota increase requests, but must not be granted permissions to create, modify, or delete infrastructure resources within the project. Which IAM role should be assigned to the analyst to adhere to the principle of least privilege?

  1. Quota Administrator (roles/servicemanagement.quotaAdmin)Cevap
  2. B
    Project Editor (roles/editor)
  3. C
    Billing Account Administrator (roles/billing.admin)
  4. D
    Project Viewer (roles/viewer) combined with budget threshold alerts

Cevap

Assign the Quota Administrator role (roles/servicemanagement.quotaAdmin) to allow viewing and requesting adjustments to GCP resource quotas while restricting broader infrastructure access.
The predefined IAM role Quota Administrator (`roles/servicemanagement.quotaAdmin`) grants the exact permissions required to view quota usage and request quota adjustments for services within a project. It enforces the principle of least privilege by not granting administrative control over resource creation, modification, or deletion.

Adım Adım Çözüm

1
Identify the operational requirement.
The user needs to view current quotas and request quota increases for project resources.
Quota management requires specific Service Management permissions.
2
Evaluate access security policies.
The solution must adhere to the principle of least privilege by withholding infrastructure edit permissions.
Primitive roles like Editor or Owner grant excess privileges across all project services.
3
Select the specific predefined IAM role for quota administration.
The predefined role Quota Administrator (roles/servicemanagement.quotaAdmin) provides exact capabilities for viewing and updating quotas.
Predefined roles isolate permissions to single operational responsibilities.

Anahtar Kavram

Least Privilege Access for GCP Resource Quota Management
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Managing and Requesting GCP Resource Quotas

Bu konudan daha fazla soru