Google Professional Cloud DevOps Engineer Exam - Topic 1 Question 98 Discussion

Actual exam question for Google's Professional Cloud DevOps Engineer exam

Question #: 98
Topic #: 1

[All Professional Cloud DevOps Engineer Questions]

[Building and implementing service monitoring strategies]

You have deployed a fleet Of Compute Engine instances in Google Cloud. You need to ensure that monitoring metrics and logs for the instances are visible in Cloud Logging and Cloud Monitoring by your company's operations and cyber

security teams. You need to grant the required roles for the Compute Engine service account by using Identity and Access Management (IAM) while following the principle of least privilege. What should you do?

AGrant the logging.editor and monitoring.metricwriter roles to the Compute Engine service accounts.

BGrant the Logging. admin and monitoring . editor roles to the Compute Engine service accounts.

CGrant the logging. logwriter and monitoring. editor roles to the Compute Engine service accounts.

DGrant the logging. logWriter and monitoring. metricWriter roles to the Compute Engine service accounts.

Show Suggested Answer

Suggested Answer: A

by Terrilyn at Nov 22, 2025, 02:27 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud DevOps Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Whitney

12 days ago

D is the best choice. Clear and focused permissions!

upvoted 0 times

...

Nobuko

17 days ago

A is tempting, but we shouldn't over-provision roles.

upvoted 0 times

...

Vannessa

22 days ago

Option B seems risky. Admin roles can be too powerful.

upvoted 0 times

...

Lawrence

27 days ago

I prefer option D. It follows least privilege well.

upvoted 0 times

...

Raylene

1 month ago

I think option A is too broad. We need to limit access.

upvoted 0 times

...

Mabel

1 month ago

C) sounds okay, but I’m not sure about the logwriter role.

upvoted 0 times

...

Yan

2 months ago

B) gives too many permissions, not ideal.

upvoted 0 times

...

Lorita

2 months ago

I think D) is the best choice here!

upvoted 0 times

...

Kent

2 months ago

Haha, I bet the exam writers had a field day coming up with these options. Gotta love cloud security!

upvoted 0 times

...

Jaclyn

2 months ago

D) for sure. Might as well give them the full access they need to keep an eye on things. Safety first!

upvoted 0 times

...

Zana

3 months ago

B) is the way to go. Gotta make sure those teams can do their jobs properly. No half-measures!

upvoted 0 times

...

Son

3 months ago

I'm going with C. Logging and monitoring are important, but let's not go overboard on the permissions, you know?

upvoted 0 times

...

Vannessa

3 months ago

D) seems like the right answer here. Gotta give those ops and security teams the access they need!

upvoted 0 times

...

Krystal

3 months ago

I’m leaning towards option D because it specifically mentions logWriter and metricWriter, which seems more aligned with what we need.

upvoted 0 times

...

Dong

3 months ago

I feel like option B might be too broad since it includes admin roles, which could violate the least privilege principle.

upvoted 0 times

...

Maile

3 months ago

I remember practicing a similar question where we had to assign roles for logging and monitoring, but I’m not sure if logging.editor is the right one here.

upvoted 0 times

...

Stephanie

4 months ago

I think we need to focus on the principle of least privilege, so maybe options A or D could be better choices.

upvoted 0 times

...

Erick

4 months ago

Hmm, I'm not sure if option D is the best choice. I'll need to carefully consider the differences between the roles and make sure I'm not granting more access than necessary.

upvoted 0 times

...

Ngoc

4 months ago

A) seems too broad, not least privilege.

upvoted 0 times

...

Cristal

4 months ago

I'm feeling pretty confident about this one. The key is to follow the principle of least privilege, so I'll go with option D to grant the most specific roles.

upvoted 0 times

...

Lashon

4 months ago

Okay, I think I've got a strategy here. I'll grant the logging.logWriter and monitoring.metricWriter roles to ensure the necessary visibility for the operations and security teams.

upvoted 0 times

...

Detra

5 months ago

Wait, can we really trust the service account with those roles?

upvoted 0 times

...

Barabara

5 months ago

I agree with D. It balances access and security.

upvoted 0 times

...

Joana

5 months ago

I'm a bit confused about the difference between the logging and monitoring roles. I'll need to double-check the documentation to understand which ones are the most appropriate.

upvoted 0 times

...