Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 61

Question

A customer wants to deploy a large number of 3-tier web applications on Compute Engine. How should the customer ensure authenticated network separation between the different tiers of the application?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Run each tier with a different Service Account (SA), and use SA-based firewall rules. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Security Engineer PCSE — Question 61