Google Associate Cloud Engineer Question 349
Select 3Google Cloud PlatformYou are setting up a new project in Google Cloud Platform and need to create a service account to allow a virtual machine to access Google Cloud Storage. Which steps should you take to create and configure this service account?
- A
Navigate to IAM & Admin, then Service Accounts, and click 'Create Service Account'.
- B
Assign the 'Storage Admin' role to the service account after creation.
- C
Generate a new private key for the service account and download it.
- D
Enable the 'Cloud Functions' API for the project.
- E
Add the service account to a VPC Network.
Show answer and explanation
Correct answers: A, B, C
Explanation
To create a service account in Google Cloud Platform, you start by navigating to the IAM & Admin section and using the Service Accounts subsection. After creating the service account, you must assign the appropriate roles to it, such as 'Storage Admin' for managing Cloud Storage. It is also common to generate and download a private key for the service account, which can be used for authentication purposes. Other tasks like enabling unrelated APIs or adding the service account to a VPC Network are not part of this specific process.
- A. Correct.
This option is correct as it describes the initial steps to create a service account in Google Cloud Platform.
- B. Correct.
This option is correct because assigning the 'Storage Admin' role allows the service account to manage Cloud Storage resources.
- C. Correct.
This option is correct as generating a private key allows external applications to authenticate as the service account.
- D. Incorrect.
This option is incorrect because enabling the 'Cloud Functions' API is unrelated to creating a service account for accessing Google Cloud Storage.
- E. Incorrect.
This option is incorrect because service accounts are not directly added to VPC Networks. They are used to grant permissions to resources and services.