Google Cloud Associate Cloud Engineer ACE — Topic 1 Question 36

Question

You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called proj-vm. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm. A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Associate Cloud Engineer ACE — Question 36