Topic 1 Question 24
A company's application is deployed with a user-managed Service Account key. You want to use Google-recommended practices to rotate the key. What should you do?
Open Cloud Shell and run gcloud iam service-accounts enable-auto-rotate --iam-account=IAM_ACCOUNT.
Open Cloud Shell and run gcloud iam service-accounts keys rotate --iam-account=IAM_ACCOUNT --key=NEW_KEY.
Create a new key, and use the new key in the application. Delete the old key from the Service Account.
Create a new key, and use the new key in the application. Store the old key on the system as a backup key.
ユーザの投票
コメント(9)
C is correct. As explained, You can rotate a key by creating a new key, updating applications to use the new key, and deleting the old key. Use the serviceAccount.keys.create() method and serviceAccount.keys.delete() method together to automate the rotation.
👍 8mdc2021/06/10C is the right choice for me
👍 4ArizonaClassics2020/08/18- 👍 4[Removed]2020/10/30
シャッフルモード