ASSOCIATE-CLOUD-ENGINEER · Question #92
ASSOCIATE-CLOUD-ENGINEER Question #92: Real Exam Question with Answer & Explanation
The correct answer is A: Add the support team group to the roles/monitoring.viewer role. We only need monitoring access. roles/monitoring.viewer Monitoring Viewer Grants read-only access to Monitoring in the Google Cloud console and API. https://cloud.google.com/iam/docs/understanding-roles
Question
You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?
Options
- AAdd the support team group to the roles/monitoring.viewer role
- BAdd the support team group to the roles/spanner.databaseUser role.
- CAdd the support team group to the roles/spanner.databaseReader role.
- DAdd the support team group to the roles/stackdriver.accounts.viewer role.
Explanation
We only need monitoring access. roles/monitoring.viewer Monitoring Viewer Grants read-only access to Monitoring in the Google Cloud console and API. https://cloud.google.com/iam/docs/understanding-roles
Community Discussion
No community discussion yet for this question.