Exam Associate Cloud Engineer topic 1 question 297 discussion

Actual exam question from Google's Associate Cloud Engineer

Question #: 297
Topic #: 1

[All Associate Cloud Engineer Questions]

You have an application running inside a Compute Engine instance. You want to provide the application with secure access to a BigQuery dataset. You must ensure that credentials are only valid for a short period of time, and your application will only have access to the intended BigQuery dataset. You want to follow Google-recommended practices and minimize your operational costs. What should you do?

A. Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the project.
B. Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the dataset.
C. Attach a new service account to the instance every hour, and grant the service account the BigQuery Data Viewer IAM role on the dataset.
D. Attach a custom service account to the instance, and grant the service account the BigQuery Data Viewer IAM role on the project.

Show Suggested Answer

Suggested Answer: C 🗳️

by MohannadSamir at May 18, 2025, 2:07 p.m.

Comments

Submit Cancel

MohannadSamir

1 month ago

Selected Answer: B

Temp credentials --> Service account Least privilege --> on dataset

upvoted 3 times

...