Google PCA Designing for Security and Compliance Practice Question
A startup wants to grant a contractor limited access to a single Cloud Storage bucket. The contractor should be able to view and download objects, but not delete or overwrite them. Which IAM role should be assigned?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
roles/storage.objectViewer
The roles/storage.objectViewer role grants read-only access to objects in a bucket, including listing and downloading objects, but does not allow modification or deletion.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
roles/storage.admin
Why it's wrong here
Admin role includes full control, including deletion and overwriting.
- ✗
roles/storage.objectAdmin
Why it's wrong here
ObjectAdmin allows deletion and overwriting.
- ✗
roles/storage.objectCreator
Why it's wrong here
ObjectCreator allows creating but not reading objects.
- ✓
roles/storage.objectViewer
Why this is correct
Correct: read-only access to objects.
Go deeper
Related to this question
Learn chapter
Introduction to Google Cloud Platform
Key term
IAM role
An IAM role is a set of permissions that an entity can assume temporarily to access cloud resources securely.
Key term
View
A view is a saved query in a database that acts like a virtual table, letting you see specific data without storing it separately.
About these practice questions
This PCA question is part of Courseiva's 955-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCA practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCA exam.