Question 1

What abstraction is primarily used to administer user access in IAM?

🟩 Roles, an abstraction of job roles.
❌ Leases
❌ Credentials
❌ Privileges

Explanation:

IAM uses roles to grant permissions. Members are assigned roles that define what actions they can perform.

---

Question 2

Which of the following is NOT a type of IAM role?

❌ Basic
❌ Predefined
❌ Custom
🟩 Advanced

Explanation:

IAM roles come in 3 types only:

• Basic roles

• Predefined roles

• Custom roles
  There is no “advanced” role type.

---

Question 3

Which of the following is NOT a type of IAM member?

❌ Service Account
🟩 Organization Account
❌ Cloud Identity domain
❌ Google Workspace domain
❌ Google Group
❌ Google Account

Explanation:

IAM members include individuals, groups, service accounts, and domains.
There is no such thing as an “Organization Account.”

---

🧾 Summary Table

---