Google Cloud Professional Cloud Architect PCA — Topic 10 Question 315

Question

For this question, refer to the TerramEarth case study. You start to build a new application that uses a few Cloud Functions for the backend. One use case requires a Cloud Function func_display to invoke another Cloud Function func_query. You want func_query only to accept invocations from func_display. You also want to follow Google's recommended best practices. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Make func_query 'Require authentication.' Create a unique service account and associate it to func_display. Grant the service account invoker role for func_query. Create an id token in func_display and include the tok... A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Architect PCA — Question 315