Exam Professional Cloud Developer topic 1 question 352 discussion

Actual exam question from Google's Professional Cloud Developer

Question #: 352
Topic #: 1

[All Professional Cloud Developer Questions]

You developed a Python script that retrieves information from files that are uploaded to Cloud Storage and writes the information to Bigtable. You have completed testing on your local environment and created the python-script service account with the Bigtable User IAM role. You want to deploy the code with the appropriate authentication while following Google-recommended practices. What should you do?

A. 1. Deploy your code to Cloud Functions. Create a Cloud Storage trigger.
2. Configure IAM binding for authentication.
B. 1. Deploy your code to Cloud Functions. Create a Cloud Storage trigger.
2. Create a service account key for authentication
C. 1. Deploy your image to Cloud Run. Create a trigger in Cloud Scheduler that triggers the service every minute.
2. Configure IAM binding for authentication.
D. 1. Deploy your image to Cloud Run. Create a trigger in Cloud Scheduler that triggers the service every minute.
2. Create a service account key for authentication.

Show Suggested Answer

Suggested Answer: C 🗳️

by Pime13 at July 15, 2025, 7:58 p.m.

Comments

Submit Cancel

Pime13

3 weeks, 6 days ago

Selected Answer: A

https://cloud.google.com/iam/docs/best-practices-for-managing-service-account-keys Service account keys can become a security risk if not managed carefully. You should choose a more secure alternative for authentication whenever possible. The main threats are related to service account keys are: Credential leakage: Service account keys might inadvertently end up in places where they are not supposed to be stored. A bad actor can use a leaked service account key to authenticate and gain a foothold in your environment. Privilege escalation: If a bad actor gets access to a poorly secured service account key, they might be able to use the key to escalate their privileges. Information disclosure: Service account keys might inadvertently disclose confidential metadata.

upvoted 1 times

...

Pime13

4 weeks ago

Selected Answer: A

https://cloud.google.com/run/docs/triggering/storage-triggers https://cloud.google.com/iam/docs/using-iam-securely

upvoted 1 times

...