ACE Question 10

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  A. as this command exists and its inputs the destination project are a parameter. Also B would copy to the whole org with is bad. C does not exist and D is a lot or work.

• Chose C1

  Why C is correct: The "create role from role" feature in the GCP Console allows you to quickly create a new custom role by cloning an existing one, even across different projects. This minimizes effort and prevents errors compared to manually selecting permissions again.

• Chose A4

  A could be possible if we were talking about organization in the question, But here, it's clearly specified "*project*" "You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps." from google doc: https://cloud.google.com/sdk/gcloud/reference/iam/roles/copy EXAMPLES To create a copy of an existing role spanner.databaseAdmin into an organization with 1234567, run: gcloud iam roles copy --source="roles/spanner.databaseAdmin" --destination=CustomViewer --dest-organization=1234567 To create a copy of an existing role spanner.databaseAdmin into a project with PROJECT_ID, run: gcloud iam roles copy --source="roles/spanner.databaseAdmin" --destination=CustomSpannerDbAdmin --dest-project=PROJECT_ID