Which Google Cloud Identity and Access Management (IAM) concept defines a SET of permissions that can be granted to a principal?
AA Project
BA Network endpoint
CA Persistent Disk
DA Role (predefined, basic, or custom)
Answer & Solution
Correct answer: D. A Role (predefined, basic, or custom)
An IAM role bundles permissions (e.g. `compute.instances.start`).
You bind a role to a principal (user, group, service account) at a scope to grant access.
Projects, network endpoints, and disks are resources — not permission sets.
Keep practising Gcpsetup
Browse all Gcpsetup questions for GCP Associate Cloud Engineer, or explore more Cloudcomputing topics.