MENU
[Building and implementing service monitoring strategies]
You have deployed a fleet Of Compute Engine instances in Google Cloud. You need to ensure that monitoring metrics and logs for the instances are visible in Cloud Logging and Cloud Monitoring by your company's operations and cyber
security teams. You need to grant the required roles for the Compute Engine service account by using Identity and Access Management (IAM) while following the principle of least privilege. What should you do?
Suggested Answer: A
Get Premium Professional Cloud DevOps Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
WH
Whitney
6 months ago
D is the best choice. Clear and focused permissions!
NO
Nobuko
7 months ago
A is tempting, but we shouldn't over-provision roles.
VA
Vannessa
7 months ago
Option B seems risky. Admin roles can be too powerful.
LA
Lawrence
7 months ago
I prefer option D. It follows least privilege well.
RA
Raylene
7 months ago
I think option A is too broad. We need to limit access.
MA
Mabel
7 months ago
C) sounds okay, but I’m not sure about the logwriter role.
YA
Yan
8 months ago
B) gives too many permissions, not ideal.
LO
Lorita
8 months ago
I think D) is the best choice here!
KE
Kent
8 months ago
Haha, I bet the exam writers had a field day coming up with these options. Gotta love cloud security!
JA
Jaclyn
8 months ago
D) for sure. Might as well give them the full access they need to keep an eye on things. Safety first!
ZA
Zana
9 months ago
B) is the way to go. Gotta make sure those teams can do their jobs properly. No half-measures!
SO
Son
9 months ago
I'm going with C. Logging and monitoring are important, but let's not go overboard on the permissions, you know?
VA
Vannessa
9 months ago
D) seems like the right answer here. Gotta give those ops and security teams the access they need!
KR
Krystal
9 months ago
I’m leaning towards option D because it specifically mentions logWriter and metricWriter, which seems more aligned with what we need.
DO
Dong
9 months ago
I feel like option B might be too broad since it includes admin roles, which could violate the least privilege principle.
MA
Maile
9 months ago
I remember practicing a similar question where we had to assign roles for logging and monitoring, but I’m not sure if logging.editor is the right one here.
ST
Stephanie
10 months ago
I think we need to focus on the principle of least privilege, so maybe options A or D could be better choices.
ER
Erick
10 months ago
Hmm, I'm not sure if option D is the best choice. I'll need to carefully consider the differences between the roles and make sure I'm not granting more access than necessary.
NG
Ngoc
10 months ago
A) seems too broad, not least privilege.
CR
Cristal
10 months ago
I'm feeling pretty confident about this one. The key is to follow the principle of least privilege, so I'll go with option D to grant the most specific roles.
LA
Lashon
10 months ago
Okay, I think I've got a strategy here. I'll grant the logging.logWriter and monitoring.metricWriter roles to ensure the necessary visibility for the operations and security teams.
DE
Detra
11 months ago
Wait, can we really trust the service account with those roles?
BA
Barabara
11 months ago
I agree with D. It balances access and security.
JO
Joana
11 months ago
I'm a bit confused about the difference between the logging and monitoring roles. I'll need to double-check the documentation to understand which ones are the most appropriate.
AR
Ardella
11 months ago
Hmm, this looks like a tricky one. I'll need to carefully review the IAM roles and permissions to make sure I grant the least privilege required.
TA
Tamesha
6 months ago
I agree, D keeps it tight with permissions.
AD
Adell
6 months ago
We should avoid over-permissioning. D seems safer.
ST
Starr
6 months ago
I lean towards C for a balanced approach.
EL
Elbert
6 months ago
But isn't D more aligned with least privilege?
GE
Gene
6 months ago
I think option A makes sense for basic access.