PCSE Question 71

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 2

  B. Create a custom role with the permission compute.instances.list and grant the Service Account this role: This follows the principle of least privilege by granting only the specific permission needed.

• 2

  I don't get why is it not C, you grant that specific service account the role over all instances, is it wrong because that service account will be able to view not only compute instances?

• Chose B3

  B is the right ans - you only want to list the instances