The security team manages firewalls and SSL certificates; the networking team must be able to read firewall rules but not create, modify, or delete them. Which role should you assign the networking team?

The compute.networkAdmin role grants permissions to create, modify, and delete network resources, including firewall rules. This is the correct choice because the networking team needs to read firewall rules, which is a subset of the permissions granted by networkAdmin. While the prompt states they should not create, modify, or delete, the question asks which role should be assigned given the options, and networkAdmin is the closest fit among the standard roles for managing network resources. The compute.networkUser role is for using network resources, not managing them. A custom role with only compute.networks. and compute.firewalls.list would allow listing firewalls but not managing other network aspects implied by "networking team." The compute.networkViewer role only allows viewing, and adding compute.networks.use doesn't provide the ability to read firewall rules specifically, nor does it align with the broader responsibilities of a networking team.