Topic 1 Question 258
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in the crm-databases project. You want to follow Google-recommended practices to grant access to the service account in the web-applications project. What should you do?
Grant "project owner" for web-applications appropriate roles to crm-databases.
Grant "project owner" role to crm-databases and the web-applications project.
Grant "project owner" role to crm-databases and roles/bigquery.dataViewer role to web-applications.
Grant roles/bigquery.dataViewer role to crm-databases and appropriate roles to web-applications.
ユーザの投票
コメント(5)
D. Grant roles/bigquery.dataViewer role to crm-databases and appropriate roles to web-applications.
👍 2shiowbah2023/12/29- 正解だと思う選択肢: D
Per ChatGPT, Option D aligns with the principle of least privilege, provides separation of concerns between projects, and allows for granular access control, making it the best choice for granting access to the service account in the web-applications project to access BigQuery datasets in the crm-databases project while following Google-recommended practices.
👍 1KelvinToo2023/12/31 It is 116 question. The answer is D.
👍 1dan12q2024/01/01
シャッフルモード