Google Cloud Professional Cloud Security Engineer PCSE — Topic 1 Question 95

Question

You are a Security Administrator at your organization. You need to restrict service account creation capability within production environments. You want to accomplish this centrally across the organization. What should you do?

Accepted Answer

Correct answer: D. The correct answer is D. Option D: Use organization policy constraints/iam.disableServiceAccountCreation boolean to disable the creation of new service accounts. A service account provides an identity for workloads to access Google Cloud APIs securely. Cloud IAM grants fine-grained, least-privilege access to Google Cloud resources. Organization Policy sets guardrails that constrain how resources can be configured across the org.

Google Cloud Professional Cloud Security Engineer PCSE — Question 95