exam questions

Exam Associate Cloud Engineer All Questions

View all questions & answers for the Associate Cloud Engineer exam

Exam Associate Cloud Engineer topic 1 question 38 discussion

Actual exam question from Google's Associate Cloud Engineer
Question #: 38
Topic #: 1
[All Associate Cloud Engineer Questions]

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

  • A. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
  • B. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.
  • C. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to the role.
  • D. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to a new group. Add the group to the role.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
yasu
Highly Voted 3 years, 10 months ago
I think it should be B, setup a group first are suggested way from Google.
upvoted 74 times
...
Agents89
Highly Voted 3 years, 9 months ago
B is the correct option
upvoted 26 times
...
warbon
Most Recent 1 week, 6 days ago
Selected Answer: A
Adding users to a group (Options B and D) is unnecessary unless you specifically want to manage access via a group.
upvoted 1 times
...
thewalker
2 months, 2 weeks ago
Selected Answer: B
B as per the best practice.
upvoted 2 times
...
gsmasad
3 months, 1 week ago
Selected Answer: B
B is correct Because adding a group instead to the user is a GCP best practice
upvoted 1 times
...
Captain1212
5 months, 1 week ago
Selected Answer: B
b seems more legit as it will add in the group and they need edit access also
upvoted 2 times
...
Fajmayor
5 months, 2 weeks ago
Selected Answer: B
Setup group and add role to it
upvoted 1 times
...
sthapit
6 months ago
I go with B but TO have more controlled access, A is correct as well
upvoted 1 times
...
findsidd
6 months, 1 week ago
Selected Answer: B
Google groups can help you manage users at scale. Each member of a Google group inherits the Identity and Access Management (IAM) roles granted to that group. This inheritance means that you can use a group's membership to manage users' roles instead of granting IAM roles to individual users. https://cloud.google.com/iam/docs/groups-in-cloud-console#:~:text=To%20add%20members%3A%20Click%20person,add%20them%20to%20the%20group.
upvoted 2 times
...
Ash_34
6 months, 3 weeks ago
Selected Answer: B
B is the correct option as spanner users are grouped into a single group and can be added to the IAM role. Easy for management work.
upvoted 1 times
...
Buruguduystunstugudunstuy
11 months, 3 weeks ago
Selected Answer: B
Answer C is incorrect because the `roles/spanner.viewer` role only allows read-only access to Spanner instances, whereas the question asks for users to be able to view and edit table data. Answer D is also incorrect for the same reason as answer C. The `roles/spanner.viewer` role does not provide the necessary permissions for editing table data. Therefore, answers A and B are the only options that provide the `roles/spanner.databaseUser` role, which includes the necessary permissions to view and edit table data on a Cloud Spanner instance. However, answer B is arguably better since it involves creating a new group and adding the users to that group, which can simplify the management of permissions in the future.
upvoted 10 times
...
librairica
1 year ago
Selected Answer: A
There's no mention of the 3 users being related, so why create a group? A seems best.
upvoted 2 times
jrisl1991
1 year ago
Because the best practice is to create groups and assign the role to the group, not to the users directly.
upvoted 3 times
...
...
librairica
1 year ago
There's no mention of the 3 users being related, so why create a group? A seems best.
upvoted 1 times
...
giuly992
1 year ago
Selected Answer: B
I think it's B, because GC best practices suggest to create groups and associate users to it.
upvoted 1 times
jrisl1991
1 year ago
You know what? I also thought it was B but there's no mention about best practices, and Google Groups can only be created if there's a google workspace organization. If you go to Google > Groups, you can't even create groups and the platform asks to choose an organization (from Google workspace). That has got me confused.
upvoted 2 times
...
...
ChristN
1 year, 2 months ago
Selected Answer: B
Bis the correct answer
upvoted 1 times
...
PKookNN
1 year, 3 months ago
Selected Answer: B
B is the most correct based on this https://cloud.google.com/spanner/docs/iam#spanner.databaseUser
upvoted 1 times
...
GaneshSurwase
1 year, 3 months ago
Selected Answer: B
Ans is B
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago