Google Cloud Associate Cloud Engineer — Question 104

You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share with your organization the status of the custom role. This will be the first version of the custom role. What should you do?

Answer options

• A. Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
• B. Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to BETA while testing the role permissions.
• C. Use permissions in your role that use the 'testing' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.
• D. Use permissions in your role that use the 'testing' support level for role permissions. Set the role stage to BETA while testing the role permissions.

Correct answer: A

Explanation

The correct answer is A because using permissions with the 'supported' support level indicates that the permissions are stable and suitable for production use. Setting the role stage to ALPHA allows for necessary testing while still communicating that the role is in the development phase. Options B, C, and D either use permissions that are not suitable for production or incorrectly set the role stage, which would not effectively convey the role's readiness for production use.