Google Cloud Professional Cloud Developer PCD — Topic 1 Question 310

Question

You are about to deploy an application hosted on a Compute Engine instance with Windows OS and Cloud SQL. You plan to use the Cloud SQL Auth Proxy for connectivity to the Cloud SQL instance. You plan to follow Google-recommended practices and the principle of least privilege. You have already created a custom service account. What should you do next?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Create and assign a custom role with the cloudsql.instances.connect permission to the custom service account. Adjust the Cloud SQL Auth Proxy start command to specify your instance connection name. Cloud SQL is a managed relational database (MySQL/PostgreSQL/SQL Server) that handles patching, backups, and failover. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Developer PCD — Question 310