Domain 5.1: Managing Identity and Access Management

In Google Cloud IAM, what is the fundamental difference between a primitive role (like Editor) and a predefined role (like Compute Instance Admin)?

A developer needs to view the configuration of Compute Engine instances and Cloud Storage buckets in a project, but should not be able to create, modify, or delete any resources. Which IAM role should you assign?

You need to grant a new team member access to manage Cloud SQL instances in a specific project. You want to follow the principle of least privilege. Which TWO actions should you take? (Select TWO)

You are creating a custom IAM role because predefined roles provide too much access. Which TWO statements are true regarding custom IAM roles? (Select TWO)