Topic 1 Question 36
You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called proj-vm. What should you do?
Download the private key from the service account, and add it to each VMs custom metadata.
Download the private key from the service account, and add the private key to each VM's SSH keys.
Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
When creating the VMs, set the service account's API scope for Compute Engine to read/write.
ユーザの投票
コメント(17)
C is the correct answer. It took me a while to figure it out because I didn't understand how service accounts work across project. This article made it clear for me. https://gtseres.medium.com/using-service-accounts-across-projects-in-gcp-cf9473fef8f0
You create the service account in proj-sa and take note of the service account email, then you go to proj-vm in IAM > ADD and add the service account's email as new member and give it the Compute Storage Admin role.
👍 31jackdbd2021/07/23Option C is the right one
👍 22kishoredeena2020/06/14C. Compute Storage Admin role has this: compute.snapshots.*
👍 4cuongnd2021/07/07
シャッフルモード