Exam Professional Cloud Security Engineer topic 1 question 257 discussion

Actual exam question from Google's Professional Cloud Security Engineer

Question #: 257
Topic #: 1

[All Professional Cloud Security Engineer Questions]

You are running code in Google Kubernetes Engine (GKE) containers in Google Cloud that require access to objects stored in a Cloud Storage bucket. You need to securely grant the Pods access to the bucket while minimizing management overhead. What should you do?

A. Create a service account. Grant bucket access to the Pods by using Workload Identity Federation for GKE.
B. Create a service account with keys. Store the keys in Secret Manager with a 30-day rotation schedule. Reference the keys in the Pods.
C. Create a service account with keys. Store the keys as a Kubernetes secret. Reference the keys in the Pods.
D. Create a service account with keys. Store the keys in Secret Manager. Reference the keys in the Pods.

Show Suggested Answer

Suggested Answer: A 🗳️

by yokoyan at Sept. 6, 2024, 1:25 a.m.

Comments

Submit Cancel

jmaquino

8 months, 3 weeks ago

Selected Answer: A

A: Workload Identity Federation for GKE is the recommended way for your workloads running on Google Kubernetes Engine (GKE) to access Google Cloud services in a secure and manageable way. https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity

upvoted 1 times

...

1e22522

11 months ago

Selected Answer: A

It's A i thikn

upvoted 1 times

...

yokoyan

11 months ago

Selected Answer: A

I think it's A.

upvoted 2 times

...