Your company has a security team that manages firewalls and SSL certificates. It also has a networking team that manages the networking resources. The networking team needs to be able to read…

Question

Options

• AAssign members of the networking team the compute.networkUser role.
• BAssign members of the networking team the compute.networkAdmin role.
• CAssign members of the networking team a custom role with only the compute.networks.* and the
• DAssign members of the networking team the compute.networkViewer role, and add the

• A
  13% (3)
• B
  79% (19)
• C
  4% (1)
• D
  4% (1)

Explanation

Note: The marked correct answer (B - compute.networkAdmin) is inconsistent with the stated requirement that the networking team should be able to read firewall rules but NOT create, modify, or delete them. compute.networkAdmin grants full control over networking resources including firewall rules, which violates least privilege. The role that accurately satisfies the requirement is compute.networkViewer, which provides read-only access to all Compute Engine networking resources, including firewall rules. This corresponds to option D (which appears to be truncated in the question). If this is an exam question, verify against current GCP documentation - the defensible correct answer based on the described access requirement is compute.networkViewer (D), not compute.networkAdmin (B).

No community discussion yet for this question.