Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 192

Question

Your organization is rolling out a new continuous integration and delivery (CI/CD) process to deploy infrastructure and applications in Google Cloud. Many teams will use their own instances of the CI/CD workflow. It will run on Google Kubernetes Engine (GKE). The CI/CD pipelines must be designed to securely access Google Cloud APIs. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: 1. Create individual service accounts for each deployment pipeline.2. Add an identifier for the pipeline in the service account naming convention.3. Ensure each pipeline runs on dedicated pods.4. Use workload identity... Workload Identity Federation lets workloads access Google Cloud without long-lived service account keys. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Security Engineer PCSE — Question 192