GCP-SEC-3-4

Which THREE of the following are Cloud IAM Objects that can be used to organize resources in Google Cloud?

• Bucket

• Folder

• Role

• Member

• Instance

Which TWO of the following statements about Cloud IAM policies is TRUE?

• A policy is a collection of access statements attached to a resource.

• An organization policy can only be applied to the organization node.

• A less restrictive parent policy will not override a more restrictive child resource policy.

• A Policy binding binds a list of members to a role.

Which TWO of the following statements about VPCs is TRUE?

• Every VPC network functions as a distributed firewall where firewall rules are defined at the network level.

• Google Cloud firewall allow rules by default only affect traffic flowing in one direction.

• A connection is considered active if it has at least one packet sent over a one hour period.

• VPC firewall rules in Google Cloud are global in scope.

Which THREE of the following are firewall rule parameters?

• Action

• Direction

• Project

• Organization

• Source