Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 205

Question

You are running applications outside Google Cloud that need access to Google Cloud resources. You are using workload identity federation to grant external identities Identity and Access Management (IAM) roles to eliminate the maintenance and security burden associated with service account keys. You must protect against attempts to spoof another user's identity and gain unauthorized access to Google Cloud resources. What should you do? (Choose two.)

Accepted Answer

Correct answer: C, D. The correct answer is C, D. Option C: Use a dedicated project to manage workload identity pools and providers. Option D: Use immutable attributes in attribute mappings. Workload Identity Federation lets workloads access Google Cloud without long-lived service account keys.

Google Cloud Professional Cloud Security Engineer PCSE — Question 205