PCNE Question 46

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  I have verified Network admin give the read permissions to firewall policies.

• Chose B2

  computer.networkAdmin role as outlined in option B is the RIGHT answer. Read more here: https://cloud.google.com/compute/docs/access/iam#compute.networkAdmin

• Chose C3

  To set up permissions for the networking team so that they can read firewall rules, but cannot create, modify, or delete them, you should assign them a custom role with only the compute.networks.* and the compute.firewalls.list permissions. Here are the steps on how to create a custom role with only the compute.networks.* and the compute.firewalls.list permissions: Go to the IAM page in the GCP Console. Click on the Create role button. Enter a name for the role, such as "Network Viewer". Select the Permissions tab. Search for the compute.networks.* permission and select it. Search for the compute.firewalls.list permission and select it. Click on the Create role button. Once you have created the custom role, you can assign it to members of the networking team.