Question 1

A developer on your team needs to manage App Engine applications, including deploying new versions and splitting traffic. However, they should not be able to create Compute Engine instances or manage Cloud Storage buckets.

Which predefined IAM role should you assign to this developer?

Accepted Answer

Evaluate the requirements: full App Engine management (deploy + traffic split) but no other services. Match this to the principle of least privilege.

Question 2

What mistakes do candidates make on this GCP ACE question?

Accepted Answer

Selecting Project Editor, which works but violates security best practices by granting too much access.

A developer on your team needs to manage App Engine applications, including deploying new versions and splitting traffic. However, they should not be able to create Compute Engine instances or manage Cloud Storage buckets.

Which predefined IAM role should you assign to this developer?

How to approach this question

Full Answer

Common mistakes

Practice the full GCP Associate Cloud Engineer Practice Exam 5

More questions from this exam