Managing Identity and Access Management (IAM).
7 practice questions under this official exam objective (ACE), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
7 total · page 1 of 1Granting External Auditors Access to BigQuery Audit Logs
For external auditors needing access to IAM access audit logs stored in BigQuery, Google recommends granting predefined roles (logging.viewer and bigQ
Authenticating On-Premises Apps to GCP AutoML APIs
When an application running outside Google Cloud (such as in your own data center) must call AutoML or other GCP APIs, the service account's identity
Who Created These Manually Provisioned Projects?
This Google Cloud governance scenario asks how to trace the creators of projects created manually before an automated provisioning process existed. Th
Custom IAM Role for Start, Stop, Reset VM Permissions
This Google Cloud IAM scenario tests how to grant least-privilege access to Compute Engine instance lifecycle actions while blocking deletion and conf
Least Privilege IAM Policy Modification for Service Accounts
Determines the correct role to grant a user permission to modify service account IAM policies in Google Cloud while strictly adhering to the principle
Restricted Log Views for Cross-Project Log Access in Cloud Logging
This ACE scenario tests how to grant least-privilege, filtered access to aggregated logs in a centralized Google Cloud Logging project. The correct ap
How to Standardize SSH Access Across Google Cloud Projects?
OS Login centralizes SSH access to Compute Engine by tying it to IAM identities and enforcing it through organization policy, rather than distributing