Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 146

Question

Your security team wants to reduce the risk of user-managed keys being mismanaged and compromised. To achieve this, you need to prevent developers from creating user-managed service account keys for projects in their organization. How should you enforce this?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: Enable an organization policy to prevent service account keys from being created. A service account provides an identity for workloads to access Google Cloud APIs securely. Organization Policy sets guardrails that constrain how resources can be configured across the org.

Google Cloud Professional Cloud Security Engineer PCSE — Question 146