Getting Started with Google Cloud
Platform Exam Questions & Answers
True or False: In Google Cloud IAM: if a policy applied at the project level gives you
Owner permissions, your access to an individual resource in that project might be
restricted to View permission if someone applies a more restrictive policy directly to that
resource. - ANSWER-False.
Policies are a union of those applied on resource itself and those inherited from higher
levels in the hierarchy. If a parent policy is less restrictive, it overrides a more restrictive
policy applied on the resource. If a parent policy is more restrictive, it does not override
a less restrictive policy applied on the resource. Therefore, access granted at a higher
level in the hierarchy cannot be taken away by policies applied at a lower level in the
hierarchy.
True or False: All Google Cloud Platform resources are associated with a project. -
ANSWER-True.
All Google Cloud Platform resources are associated with a project.
Service accounts are used to provide which of the following? (Choose all that are
correct. Choose 3 responses.) - ANSWER-1. A way to allow users to act with service
account permissions
2. A way to restrict the actions a resource (such as a VM) can perform
3. Authentication between Google Cloud Platform services
How do GCP customers and Google Cloud Platform divide responsibility for security? -
ANSWER-Google takes care of the lower parts of the stack, and customers are
responsible for the higher parts.
Which of these values is globally unique, permanent, and unchangeable, but chosen by
the customer? - ANSWER-The project ID
Consider a single hierarchy of GCP resources. Which of these situations is possible?
(Choose all that are correct. Choose 3 responses.) - ANSWER-1. There is no
organization node, and there are no folders.
2. There is an organization node, and there is at least one folder.
3. There is an organization node, and there are no folders.
What is the difference between IAM primitive roles and IAM predefined roles? -
ANSWER-Primitive roles affect all resources in a GCP project. Predefined roles apply to
a particular service in a project.
Which statement is true about billing for solutions deployed using Cloud Marketplace
(formerly known as Cloud Launcher)? - ANSWER-You pay only for the underlying GCP
Platform Exam Questions & Answers
True or False: In Google Cloud IAM: if a policy applied at the project level gives you
Owner permissions, your access to an individual resource in that project might be
restricted to View permission if someone applies a more restrictive policy directly to that
resource. - ANSWER-False.
Policies are a union of those applied on resource itself and those inherited from higher
levels in the hierarchy. If a parent policy is less restrictive, it overrides a more restrictive
policy applied on the resource. If a parent policy is more restrictive, it does not override
a less restrictive policy applied on the resource. Therefore, access granted at a higher
level in the hierarchy cannot be taken away by policies applied at a lower level in the
hierarchy.
True or False: All Google Cloud Platform resources are associated with a project. -
ANSWER-True.
All Google Cloud Platform resources are associated with a project.
Service accounts are used to provide which of the following? (Choose all that are
correct. Choose 3 responses.) - ANSWER-1. A way to allow users to act with service
account permissions
2. A way to restrict the actions a resource (such as a VM) can perform
3. Authentication between Google Cloud Platform services
How do GCP customers and Google Cloud Platform divide responsibility for security? -
ANSWER-Google takes care of the lower parts of the stack, and customers are
responsible for the higher parts.
Which of these values is globally unique, permanent, and unchangeable, but chosen by
the customer? - ANSWER-The project ID
Consider a single hierarchy of GCP resources. Which of these situations is possible?
(Choose all that are correct. Choose 3 responses.) - ANSWER-1. There is no
organization node, and there are no folders.
2. There is an organization node, and there is at least one folder.
3. There is an organization node, and there are no folders.
What is the difference between IAM primitive roles and IAM predefined roles? -
ANSWER-Primitive roles affect all resources in a GCP project. Predefined roles apply to
a particular service in a project.
Which statement is true about billing for solutions deployed using Cloud Marketplace
(formerly known as Cloud Launcher)? - ANSWER-You pay only for the underlying GCP
