Roles (basic, predefined, custom) in GCP - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

Understanding Basic Roles in GCP

Which of the following statements correctly describes the basic roles in Google Cloud Platform?

A Basic roles are custom roles created by users to grant specific permissions tailored to their needs.

B Basic roles include Owner, Editor, and Viewer, and they grant broad permissions across all resources in a project.

C Basic roles are deprecated and no longer available in GCP.

D Basic roles are predefined roles that only apply to specific services like Compute Engine or Cloud Storage.

💡 Hint

Think about roles that apply broadly across a whole project.

Basic roles are the broadest roles in GCP: Owner, Editor, and Viewer. They apply to all resources in a project and grant wide-ranging permissions.

🧠 Conceptual

intermediate

Predefined Roles Purpose

What is the main purpose of predefined roles in Google Cloud Platform?

A To provide very broad permissions that apply to all resources in a project.

B To allow users to create their own roles with any permissions they want.

C To grant permissions tailored to specific GCP services or tasks, offering more granularity than basic roles.

D To replace custom roles and remove the need for user-defined permissions.

💡 Hint

Think about roles designed for specific services or tasks.

Predefined roles provide fine-grained permissions for specific GCP services or tasks, offering more control than basic roles.

❓ Architecture

advanced

Choosing Role Types for a Secure Project

You are designing access control for a GCP project. You want to follow the principle of least privilege and allow users to perform only necessary actions on Compute Engine and Cloud Storage. Which role types should you assign?

A Assign basic roles like Editor to all users for simplicity.

B Create custom roles with all permissions and assign them to users.

C Assign Owner role to all users to avoid permission issues.

D Assign predefined roles specific to Compute Engine and Cloud Storage to users based on their tasks.

💡 Hint

Think about limiting permissions to only what is needed.

Using predefined roles specific to services allows you to grant only the permissions users need, following the least privilege principle.

❓ security

advanced

Custom Roles and Permission Management

Which statement about custom roles in GCP is true?

A Custom roles allow you to combine permissions from multiple predefined roles to fit specific needs.

B Custom roles can only include permissions from basic roles.

C Custom roles automatically update when new permissions are added to GCP services.

D Custom roles cannot be assigned to users or service accounts.

💡 Hint

Consider how custom roles help tailor permissions.

Custom roles let you pick and combine permissions from predefined roles or individual permissions to create a role that fits your exact needs.

❓ service_behavior

expert

Effect of Assigning Multiple Roles

If a user is assigned both a predefined role with read-only permissions on Cloud Storage and a custom role with write permissions on the same service, what will be the user's effective permissions?

A The user will have both read and write permissions combined from both roles.

B The user will have write permissions only, as custom roles replace predefined roles.

C The user will have only read-only permissions because predefined roles override custom roles.

D The user will have no permissions due to conflict between roles.

💡 Hint

Think about how permissions from multiple roles combine.

In GCP, permissions from multiple roles assigned to a user are combined, so the user gets all permissions granted by any role.