Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Network Engineer Exam - Topic 1 Question 18 Discussion

Your company has a security team that manages firewalls and SSL certificates. It also has a networking team that manages the networking resources. The networking team needs to be able to read firewall rules, but should not be able to create, modify, or delete them.How should you set up permissions for the networking team?
B) Assign members of the networking team the compute.networkAdmin role.
A) Assign members of the networking team the compute.networkUser role.
C) Assign members of the networking team a custom role with only the compute.networks.* and the compute.firewalls.list permissions.
D) Assign members of the networking team the compute.networkViewer role, and add the compute.networks.use permission.

Google Professional Cloud Network Engineer Exam - Topic 1 Question 18 Discussion

Actual exam question for Google's Professional Cloud Network Engineer exam
Question #: 18
Topic #: 1
[All Professional Cloud Network Engineer Questions]

Your company has a security team that manages firewalls and SSL certificates. It also has a networking team that manages the networking resources. The networking team needs to be able to read firewall rules, but should not be able to create, modify, or delete them.

How should you set up permissions for the networking team?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Youlanda at May 09, 2022, 07:24 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Network Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Yong
7 months ago
I agree with C, it’s all about the right permissions!
upvoted 0 times
...
Yuette
7 months ago
Wait, can they really only read the rules? That seems risky!
upvoted 0 times
...
Aja
8 months ago
D seems reasonable, but can they really just view?
upvoted 0 times
...
Georgeanna
8 months ago
Definitely not A, that role gives too much access.
upvoted 0 times
...
Raelene
8 months ago
I think option C is the best choice. Custom roles are flexible!
upvoted 0 times
...
Jutta
8 months ago
I feel like the compute.networkUser role might not give enough access to read the firewall rules. I need to double-check what that role includes.
upvoted 0 times
...
Francesco
8 months ago
I practiced a similar question where we had to assign specific permissions. A custom role could be a good option if it includes the right permissions.
upvoted 0 times
...
Jeniffer
8 months ago
I remember that the networking team needs read-only access, so I think a viewer role might be the right choice.
upvoted 0 times
...
Beckie
8 months ago
I'm not entirely sure, but I think the compute.networkAdmin role allows too much access. We need to limit their permissions.
upvoted 0 times
...
Mee
8 months ago
Okay, so we need to deploy two new nodes to perform the upgrade. That makes sense, but how do we do that in the most cost-effective way?
upvoted 0 times
...
Alyssa
8 months ago
I'm confused between partial-interval and momentary time sampling... but I think I lean towards whole-interval for this question.
upvoted 0 times
...
Crista
8 months ago
This is a tricky one. I'm going to re-read the question a few times and work through the numbers step-by-step to make sure I don't miss anything. Adjusting retained earnings can be a bit complicated, so I want to be confident in my answer.
upvoted 0 times
...
Rupert
8 months ago
Okay, I remember learning that post-investment audits are used to evaluate the outcomes of projects. I think the right answer is C - they allow the outcome to be evaluated as soon as possible.
upvoted 0 times
...

Save Cancel