Google Cloud Associate Cloud Engineer ACE — Topic 1 Question 326

Question

Your organization has created hundreds of service accounts for different applications hosted on-premises and in other clouds that use Google Cloud APIs. You need to audit the service account keys that have been created and identify the keys that are older than 90 days. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Execute the gcloud asset search-all-resources--scope="organizations/[ORG_ID]"--query="createTime < [DATE_90_DAYS_AGO]"--asset-types="iam.googleapis.com/ServiceAccountKey"--order-by="createTime" command. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Associate Cloud Engineer ACE — Question 326