Associate Cloud Engineer Exam QuestionsBrowse all questions from this exam

Associate Cloud Engineer Exam - Question 118


You need to create a custom IAM role for use with a GCP service. All permissions in the role must be suitable for production use. You also want to clearly share with your organization the status of the custom role. This will be the first version of the custom role. What should you do?

Show Answer
Correct Answer: A

To create a custom IAM role for production use in GCP, you should use permissions that have the 'supported' support level, as they are fully supported in custom roles and suitable for production environments. The 'testing' support level permissions are not recommended for production because they can exhibit unexpected behavior. Since this will be the first version of the custom role, the appropriate stage to set is ALPHA to indicate that the role is still being developed or tested and is not yet ready for widespread use.

Discussion

17 comments
Sign in to comment
raksteerOption: A
Jul 13, 2020

You need a custom role with permissions supported in prod and you want to publish the status of the role. https://cloud.google.com/iam/docs/custom-roles-permissions-support SUPPORTED The permission is fully supported in custom roles. TESTING The permission is being tested to check its compatibility with custom roles. You can include the permission in custom roles, but you might see unexpected behavior. Not recommended for production use. NOT_SUPPORTED The permission is not supported in custom roles. You can't use TESTING as it is not good for prod. And you need first version which should be ALPHA. Answer should be A.

passmepls
Aug 21, 2020

good job

BigQuery
Mar 15, 2022

WAY TO GO. VERY CLEAR EXP INDEED

ESP_SAPOption: A
Aug 24, 2020

Correct Answer is (A): Testing and deploying Custom roles include a launch stage, which is stored in the stage property for the role. The launch stage is informational; it helps you keep track of whether each role is ready for widespread use. Each custom role can have one of the following launch stages: Launch stages ALPHA The role is still being developed or tested, or it includes permissions for Google Cloud services or features that are not yet public. It is not ready for widespread use. BETA The role has been tested on a limited basis, or it includes permissions for Google Cloud services or features that are not generally available. GA The role has been widely tested, and all of its permissions are for Google Cloud services or features that are generally available.

ESP_SAP
Aug 24, 2020

Correct Answer is (A): Continuation Support levels for permissions in custom roles You can include many, but not all, Identity and Access Management (IAM) permissions in custom roles. Each permission has one of the following support levels: Support level Description SUPPORTED The permission is fully supported in custom roles. TESTING The permission is being tested to check its compatibility with custom roles. You can include the permission in custom roles, but you might see unexpected behavior. Not recommended for production use. NOT_SUPPORTED The permission is not supported in custom roles. The first version of the Custom Role is ALPHA then suitable to productions all permissions in "Supported"...

GCP_Student1
Feb 25, 2021

ESP_SAP There is a discrepancy between your first post and the second post. Compare these two sentences; 1st POST - ALPHA The role is still being developed or tested, or it includes permissions for Google Cloud services or features that are not yet public. It is not ready for widespread use. 2nd POST - SUPPORTED The permission is fully supported in custom roles. Are you still going to go with A ?

learn_GCP
Sep 23, 2022

Here ALPHA is for Google cloud feature, only informational. given to identify whether the feature is fully available as a service. and SUPPORTED -- is for a custom role which is supported by Google cloud, meaning any support is provided by Google cloud

sudavOption: A
Aug 20, 2021

A - SUPPORTED -The permission is fully supported in custom roles. role stage, the stage transitions from ALPHA –> BETA –> GA The only option that satisfies “ALPHA” stage with “SUPPORTED” support level is Use permissions in your role that use the SUPPORTED support level for role permissions. Set the role stage to ALPHA while testing the role permissions

sid0127Option: A
Nov 24, 2021

A is the correct answer

Raz0rOption: A
Jan 26, 2022

A is the only right solution.

Rayuga1Option: A
Dec 6, 2023

Its A cause in first place it need to be supported not in testing phase because the question is asking it to be in ready phase secondly then needed to be shared in testing phase

[Removed]Option: A
Mar 25, 2021

A is correct. Use permissions in your role that use the ג€˜supportedג€™ support level for role permissions. Set the role stage to ALPHA while testing the role permissions.

mcaromitOption: A
May 14, 2021

A is correct

AzureDP900Option: A
Jun 23, 2022

A is right

abirroyOption: A
Aug 7, 2022

Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.

theBestStudentOption: A
Aug 10, 2022

It must be suitable for production so Supported permissions only. Plus, it is your first version of the custom role, so you need to check if all is good, then ALPHA.

Tofer2022Option: B
Nov 17, 2022

why not B?

temple1305
Mar 21, 2023

Because ...FIRST VERSION... is ALPHA.

Neha_PallaviOption: B
Aug 25, 2023

You need a custom role with permissions supported in prod and you want to publish the status of the role. https://cloud.google.com/iam/docs/custom-roles-permissions-support SUPPORTED The permission is fully supported in custom roles.

Captain1212Option: A
Sep 3, 2023

Answer is A, as you need for production and you dont neeed testing for it and you need first version , so it will be ALPHA , not beta

scanner2Option: A
Sep 8, 2023

A is correct answer. https://cloud.google.com/iam/docs/roles-overview#custom-role-supported-permissions https://cloud.google.com/iam/docs/roles-overview#custom-role-testing-deploying

BAofBKOption: A
Nov 6, 2023

I will go with A

nish2288Option: A
Jun 25, 2024

Let's break down the options: A & B: "supported" is the ideal choice for production roles as they are well-tested and documented. BETA is for pre-release features, not initial testing. C: "testing" permissions are unstable and not suited for production. ALPHA stage is for internal testing before even BETA. D: Same issue as option C - "testing" permissions are not for production, and ALPHA is an earlier stage than BETA. Therefore, the most suitable approach is: A. Use permissions in your role that use the 'supported' support level for role permissions. Set the role stage to ALPHA while testing the role permissions.