Google Cloud Certified Professional Cloud Network Engineer Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  Editor has broader permissions compared to compute.networkAdmin because Editor can access and modify resources across the entire project, not just networking-related resources. compute.networkAdmin is restricted to network management tasks only.

• Chose D1

  closest is D, though it lacks the compute.interconnectAttachments.delete permission. but the rest of the permissions adhere to the questions requirement which is provide least privilege only to manage VLAN. Providing network admin would be too broad of a permission and does not adhere to the questions requirement of Least Priv

• 2

  changing my answer to B $ gcloud iam roles describe roles/compute.networkAdmin | grep inter - compute.interconnectAttachments.create - compute.interconnectAttachments.createTagBinding - compute.interconnectAttachments.delete - compute.interconnectAttachments.deleteTagBinding - compute.interconnectAttachments.get - compute.interconnectAttachments.list - compute.interconnectAttachments.listEffectiveTags - compute.interconnectAttachments.listTagBindings - compute.interconnectAttachments.setLabels - compute.interconnectAttachments.update