Google Exam Professional Cloud Architect Topic 8 Question 72 Discussion

Actual exam question for Google's Professional Cloud Architect exam

Question #: 72
Topic #: 8

[All Professional Cloud Architect Questions]

Your company pushes batches of sensitive transaction data from its application server VMs to Cloud Pub/Sub for processing and storage. What is the Google-recommended way for your application to authenticate to the required Google Cloud services?

AEnsure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles.

BEnsure that VM service accounts do not have access to Cloud Pub/Sub, and use VM access scopes to
grant the appropriate Cloud Pub/Sub IAM roles.

CGenerate an OAuth2 access token for accessing Cloud Pub/Sub, encrypt it, and store it in Cloud Storage for access from each VM.

DCreate a gateway to Cloud Pub/Sub using a Cloud Function, and grant the Cloud Function service account the appropriate Cloud Pub/Sub IAM roles.

Show Suggested Answer

Suggested Answer: B

by Paris at Nov 23, 2023, 04:12 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Architect Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Maddie

2 months ago

Encrypt an OAuth token and store it in Cloud Storage? That's a recipe for disaster. Option A is the clear winner here.

upvoted 0 times

Sabra

12 days ago

C) Ensure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles.

upvoted 0 times

...

Ngoc

19 days ago

B) Encrypt an OAuth token and store it in Cloud Storage? That's a recipe for disaster. Option A is the clear winner here.

upvoted 0 times

...

Yuriko

21 days ago

A) Ensure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles.

upvoted 0 times

...

Patti

2 months ago

A gateway using a Cloud Function? That's like using a sledgehammer to crack a nut. Option A all the way!

upvoted 0 times

...

Stephane

2 months ago

I was a bit confused by the options, but after reading them carefully, I agree that Option A is the correct answer. Seems like the most secure and efficient approach.

upvoted 0 times

Stanford

20 days ago

Definitely, security is key when dealing with sensitive data.

upvoted 0 times

...

Glenna

25 days ago

It's important to ensure that only the necessary permissions are granted.

upvoted 0 times

...

Herminia

26 days ago

I agree, granting the appropriate IAM roles to VM service accounts is the way to go.

upvoted 0 times

...

Brittani

1 months ago

I think Option A is the best choice.

upvoted 0 times

...

Aleshia

2 months ago

I was thinking the same thing as Georgeanna. Option A is the way to go. Much simpler than trying to manage OAuth tokens or creating a gateway.

upvoted 0 times

...

Georgeanna

2 months ago

Option A seems like the straightforward choice here. Granting the appropriate IAM roles to the VM service accounts is the Google-recommended way to authenticate to the required services.

upvoted 0 times

Phung

23 days ago

D) Creating a gateway using a Cloud Function and granting the Cloud Function service account the IAM roles could also work.

upvoted 0 times

...

Vallie

1 months ago

A) But the Google-recommended way is to grant the IAM roles directly to the VM service accounts.

upvoted 0 times

...

Breana

2 months ago

B) I think using VM access scopes to grant the appropriate Cloud Pub/Sub IAM roles is a better option.

upvoted 0 times

...

Demetra

2 months ago

A) Ensure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles.

upvoted 0 times

...

Lindsey

2 months ago

I'm not sure, but I think option C) Generate an OAuth2 access token and store it in Cloud Storage could also be a valid approach.

upvoted 0 times

...

Percy

3 months ago

I agree with Alica. It makes sense to grant the necessary IAM roles to the VM service accounts for authentication.

upvoted 0 times

...

Alica

3 months ago

I think the answer is A) Ensure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles.

upvoted 0 times

...