Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 2 of 63
Free Preview · 63 of 210 · questions 1–63 of 210 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Based on Principle of Least Privilege, option C which gives public url is not the best practice
Thats defenetly C, becuase there is no Dashboard Viewer iam role at GCP IAM. And sharing chart by URL is more secure than a whole project. GCP ducumentation suggest that: https://cloud.google.com/monitoring/charts/share-dashboards
The most restrictive and correct option is B. Sharing the workspace Project ID and assigning the roles/monitoring.dashboardViewer role grants the SRE team only the ability to view dashboards. They won't have access to other Monitoring features or resources within the project. This adheres to the principle of least privilege. Option A is too broad. The roles/monitoring.viewer role grants read access to all monitoring data, not just the specific chart. Options C and D are unsuitable because "Share chart by URL" makes the chart publicly accessible to anyone with the link, violating the requirement of sharing only with the SRE team and least privilege principle. Even with a Viewer role assigned, the URL method bypasses specific IAM controls.