For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeGCP Associate Cloud Engineer (ACE)GCP Associate Cloud Engineer Practice Exam 3Question 44
    Medium1 markMultiple Choice
    Domain 5.1: Managing Identity and Access Management (IAM)Domain 5.1IAMGoogle GroupsBest Practices

    GCP ACE · Question 44 · Domain 5.1: Managing Identity and Access Management (IAM)

    You have a team of 10 developers who all need the 'roles/run.developer' role to deploy applications to Cloud Run. You want to manage their access efficiently so that when a developer leaves the team, their access can be easily revoked without modifying the project's IAM policy directly.

    Which TWO steps should you take? (Select TWO)

    Answer options:

    A.

    Create a Google Group and add the 10 developers as members.

    B.

    Grant the 'roles/run.developer' role to each developer individually.

    C.

    Grant the 'roles/run.developer' role to the Google Group at the project level.

    D.

    Create a Service Account for each developer and grant the role to the Service Accounts.

    E.

    Assign the developers to a custom VPC network.

    How to approach this question

    Identify the best practice for managing IAM permissions for teams of users.

    Full Answer

    The best practice for managing IAM for multiple users is to use Google Groups. You create a group, add the users to it, and then bind the IAM role to the group. If a user leaves, you simply remove them from the Google Group; the project's IAM policy remains unchanged.

    Common mistakes

    Assigning roles to users individually, which creates administrative overhead.
    Question 43All questionsQuestion 45

    Practice the full GCP Associate Cloud Engineer Practice Exam 3

    50 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01You are starting a new project in Google Cloud and need to create a new GCP project and enable th...EasyQ02A new team member has joined your operations team. They need to be able to view all Compute Engin...MediumQ03Your company is migrating to Google Cloud. You currently manage all employee identities in an on-...MediumQ04Your development team is experimenting with new GCP services in a sandbox project. The finance te...MediumQ05Your company wants to perform complex, custom SQL analysis on their Google Cloud billing data to ...Easy
    View all 50 questions →