Identity And Access Management (IAM) » Week 3 » Managing Security In Google Cloud

Q: Which FOUR of the following are Cloud IAM Objects that can be used to organize resources in Google Cloud?

Correct! Roles are also cloud resources, in this context. Correct! Members are also cloud resources, in this context. Correct! Folders are objects that can be used to organize cloud resources. Correct! The Organization object is actually the main object under which all others nest hierarchically.

Q: Projects in Google Cloud provide many management-related features, including the ability to (choose TWO below...)

Correct! You can also track general resource usage as well. Correct! You can also assign manager permissions more effectively,

Q: Which TWO of the following statements about Cloud IAM Policies is TRUE?

Correct! One way to think of it is, resource policies are a union of parent and resource. Correct! Members can be user accounts, Google groups, Google domains, and service accounts.