Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 320

Question

You are developing an application that runs on a Compute Engine VM. The application needs to access data stored in Cloud Storage buckets in other Google Cloud projects. The required access to the buckets is variable. You need to provide access to these resources while following Google- recommended practices. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create IAM bindings for the VM’s service account and the required buckets that allow appropriate access to the data stored in the buckets. A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Professional Cloud Security Engineer PCSE — Question 320