Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 241

Question

You are developing a new application that uses exclusively Compute Engine VMs. Once a day, this application will execute five different batch jobs. Each of the batch jobs requires a dedicated set of permissions on Google Cloud resources outside of your application. You need to design a secure access concept for the batch jobs that adheres to the least-privilege principle. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: 1. Create a general service account “g-sa” to orchestrate the batch jobs.2. Create one service account per batch job “b-sa-[1-5]”, and grant only the permissions required to run the individual batch jobs to the servic... Google Cloud Batch schedules and runs batch jobs at scale without managing infrastructure. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Security Engineer PCSE — Question 241