Google Cloud Associate Cloud Engineer ACE — Topic 1 Question 297

Question

You have an application running inside a Compute Engine instance. You want to provide the application with secure access to a BigQuery dataset. You must ensure that credentials are only valid for a short period of time, and your application will only have access to the intended BigQuery dataset. You want to follow Google-recommended practices and minimize your operational costs. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the dataset. BigQuery is a serverless, petabyte-scale data warehouse for fast SQL analytics with no infrastructure to manage. A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Associate Cloud Engineer ACE — Question 297