Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 71

Question

You will create a new Service Account that should be able to list the Compute Engine instances in the project. You want to follow Google-recommended practices. What should you do?

Accepted Answer

Correct answer: B. The correct answer is B. Option B: Create a custom role with the permission compute.instances.list and grant the Service Account this role. A service account provides an identity for workloads to access Google Cloud APIs securely.

Google Cloud Professional Cloud Security Engineer PCSE — Question 71