Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 32

Question

You are creating an internal App Engine application that needs to access a user's Google Drive on the user's behalf. Your company does not want to rely on the current user's credentials. It also wants to follow Google-recommended practices. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Create a new service account, and grant it G Suite domain-wide delegation. Have the application use it to impersonate the user. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Security Engineer PCSE — Question 32