Google Cloud Professional Cloud DevOps Engineer PCDOE — Topic 1 Question 156

Question

You are designing a new Google Cloud organization for a client. Your client is concerned with the risks associated with long-lived credentials created in Google Cloud. You need to design a solution to completely eliminate the risks associated with the use of JSON service account keys while minimizing operational overhead. What should you do?

Accepted Answer

Correct answer: A. The correct answer is A. Option A: Apply the constraints/iam.disableServiceAccountKevCreation constraint to the organization. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources.

Google Cloud Professional Cloud DevOps Engineer PCDOE — Question 156