Examkin

Soru

Zorluk: OrtaManaging and Requesting GCP Resource Quotas

A cloud operations team is preparing for a high-traffic seasonal event in a Google Cloud project. To support additional front-end load balancers, they anticipate exceeding their current regional quota for In-Use IP Addresses in the us-central1 region. An administrator needs to delegate authority to a site reliability engineer so they can monitor current quota utilization and submit quota increase requests through the Google Cloud Console while adhering to the principle of least privilege. Which IAM role should be assigned to the engineer?

  1. Quota Administrator (roles/servicemanagement.quotaAdmin)Cevap
  2. B
    Project Owner (roles/owner)
  3. C
    Billing Account Administrator (roles/billing.admin)
  4. D
    Compute Admin (roles/compute.admin)

Cevap

The Quota Administrator role (roles/servicemanagement.quotaAdmin) should be granted because it provides the minimal required permissions to view usage and submit quota increase requests.
The correct option is Quota Administrator (roles/servicemanagement.quotaAdmin). In Google Cloud, managing and requesting quota changes is controlled by Service Management IAM permissions. The Quota Administrator role allows users to view quota limits, monitor current consumption, and request increases directly from the IAM & Admin > Quotas interface in the console while maintaining least-privilege security standards.

Adım Adım Çözüm

1
Identify the operational requirement.
The engineer needs permissions to view resource quotas and submit quota increase requests in the Google Cloud Console.
Quota monitoring and adjustment requests require explicit service management quota administrative privileges.
2
Apply Google Cloud IAM security best practices.
Evaluate roles against the principle of least privilege.
Using predefined roles tailored to specific tasks prevents granting excessive administrative access to unrelated project resources or billing configurations.
3
Select the correct IAM role.
Choose Quota Administrator (roles/servicemanagement.quotaAdmin).
This predefined role contains permissions such as servicemanagement.quotas.update to manage and request quotas without granting broad service modification capabilities.

Anahtar Kavram

Delegating quota management permissions using the principle of least privilege
Bu soruyu puanla

Konular

Managing and Requesting GCP Resource Quotas

Bu konudan daha fazla soru