ExamTopics Logo
Mail Us[email protected]
Menu
Google Discussions
exam questions

Exam Professional Cloud Database Engineer All Questions

View all questions & answers for the Professional Cloud Database Engineer exam
Go to Exam

Exam Professional Cloud Database Engineer topic 1 question 51 discussion

Actual exam question from Google's Professional Cloud Database Engineer
Question #: 51
Topic #: 1
[All Professional Cloud Database Engineer Questions]

You are deploying a new Cloud SQL instance on Google Cloud using the Cloud SQL Auth proxy. You have identified snippets of application code that need to access the new Cloud SQL instance. The snippets reside and execute on an application server running on a Compute Engine machine. You want to follow Google-recommended practices to set up Identity and Access Management (IAM) as quickly and securely as possible. What should you do?

  • A. For each application code, set up a common shared user account.
  • B. For each application code, set up a dedicated user account.
  • C. For the application server, set up a service account.
  • D. For the application server, set up a common shared user account.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by chelbsik at Dec. 25, 2022, 10:28 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Lucker
8 months, 2 weeks ago
the best answer would be B . Need granular control for each of the code snippets . The advantage of using a service account for this purpose is that you can create a credential file specifically for the Cloud SQL Auth Proxy, and it is explicitly and permanently linked to the Cloud SQL Auth Proxy as long as it is running. For this reason, using a service account is the recommended method for production instances not running on a Compute Engine instance.
upvoted 1 times
...
felipeschossler
2 years ago
C. The docs proving this are here: Create and configure a Google Cloud service account that has the Cloud SQL Client role with permissions to connect to Cloud SQL.
upvoted 1 times
...
dynamic_dba
2 years, 1 month ago
C. The Google recommendation would be for an application to use a service account. None of the other options make sense in light of this.
upvoted 2 times
...
GCP72
2 years, 4 months ago
Selected Answer: C
Correct answer is C, service account is the GCP recommended option
upvoted 3 times
...
pk349
2 years, 4 months ago
B: For each application code, set up a dedicated ***** user account.
upvoted 1 times
...
chelbsik
2 years, 4 months ago
Selected Answer: C
https://cloud.google.com/sql/docs/mysql/sql-proxy#using-a-service-account
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago