Google Associate Cloud Engineer IAM Configuration Quiz

1. Which type of member identity can be used in IAM policy bindings?

Google Accounts, Service Accounts, and Groups

Only Google Accounts

Only Service Accounts

Only externally managed identities

2. Which IAM condition can restrict access based on resource attributes?

Time-based conditions

IP address restrictions

Resource name and tags

User department

3. What does 'gcloud iam service-accounts create' do?

Creates a new service account in the current project

Lists all existing service accounts

Deletes a service account

Assigns roles to a service account

4. True or False: A custom role can have more permissions than any predefined role.

True

False

5. Which IAM feature allows you to review and audit who has access to resources?

Policy Simulator

Cloud Audit Logs

IAM Recommendations

Access Context Manager

6. What is the 'roles/owner' role used for in GCP?

Managing billing and project ownership

Creating and deleting service accounts

Monitoring resource usage

Viewing audit logs

7. True or False: A service account can impersonate another service account using IAM roles.

True

False

8. Which resource hierarchy level in GCP supports IAM policy binding?

Organization, Folder, Project, and Resource

Only Project level

Only Organization level

Folder and Project only

9. What is the purpose of the gcloud iam roles describe command?

To list all available roles in GCP

To display detailed information about a specific role

To create a new custom role

To delete a role from the organization

10. True or False: Custom roles in GCP IAM can include any permission available in predefined roles.

True

False

11. What is the primary purpose of a service account in Google Cloud?

To authenticate applications and services to GCP APIs

To store user credentials for human authentication

To manage billing and payment methods

To monitor resource utilization and performance metrics

12. What does the principle of least privilege mean in IAM?

Grant users the minimum permissions needed for their tasks

Give all users the same set of permissions

Revoke all permissions from users by default

Only grant permissions to administrators

13. True or False: IAM policies can only be set at the project level.

True

False

14. Which IAM role allows a user to manage other IAM roles and policies?

Security Admin

IAM Admin

Organization Admin

Resource Admin

15. What is the recommended best practice for service account key management?

Store keys in version control systems

Rotate keys regularly and avoid using long-lived keys

Share keys across all team members

Use the same key for all service accounts

16. Which command-line tool is commonly used to manage IAM policies in GCP?

Gcloud iam

Gsutil

Kubectl

Terraform

17. True or False: A user can be assigned multiple roles on the same GCP resource.

True

False

18. A policy binding in IAM consists of a member, a role, and what else?

A resource

A timestamp

A billing account

A region

19. What is the difference between a Basic role and a Predefined role in GCP IAM?

Basic roles are custom; predefined roles are Google-managed

Basic roles (Owner, Editor, Viewer) are broad; predefined roles grant specific permissions

Predefined roles are only for service accounts

Basic roles cost more than predefined roles

20. Which IAM role provides full administrative access to all GCP resources?

Editor

Owner

Viewer

Security Admin

Google Associate Cloud Engineer IAM Configuration Quiz

1. Which type of member identity can be used in IAM policy bindings?

2.

What first name or nickname would you like us to use?

2. Which IAM condition can restrict access based on resource attributes?

3. What does 'gcloud iam service-accounts create' do?

4. True or False: A custom role can have more permissions than any predefined role.

5. Which IAM feature allows you to review and audit who has access to resources?

6. What is the 'roles/owner' role used for in GCP?

7. True or False: A service account can impersonate another service account using IAM roles.

8. Which resource hierarchy level in GCP supports IAM policy binding?

9. What is the purpose of the gcloud iam roles describe command?

10. True or False: Custom roles in GCP IAM can include any permission available in predefined roles.

11. What is the primary purpose of a service account in Google Cloud?

12. What does the principle of least privilege mean in IAM?

13. True or False: IAM policies can only be set at the project level.

14. Which IAM role allows a user to manage other IAM roles and policies?

15. What is the recommended best practice for service account key management?

16. Which command-line tool is commonly used to manage IAM policies in GCP?

17. True or False: A user can be assigned multiple roles on the same GCP resource.

18. A policy binding in IAM consists of a member, a role, and what else?

19. What is the difference between a Basic role and a Predefined role in GCP IAM?

20. Which IAM role provides full administrative access to all GCP resources?