Google Cloud Associate Cloud Engineer — Question 3

You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

Answer options

• A. Use gcloud iam roles copy and specify the production project as the destination project.
• B. Use gcloud iam roles copy and specify your organization as the destination organization.
• C. In the Google Cloud Platform Console, use the 'create role from role' functionality.
• D. In the Google Cloud Platform Console, use the 'create role' functionality and select all applicable permissions.

Correct answer: A

Explanation

The correct answer is A because using gcloud iam roles copy directly allows for the efficient transfer of IAM roles to the specified production project. Option B is incorrect as copying to an organization does not target the specific project needed. Options C and D require more manual steps and do not leverage the built-in functionality for copying roles, making them less efficient.