Google Associate Cloud Engineer exam dumps

Google Associate Cloud Engineer practice question 355 of 375

Associate Cloud Engineer. Free level, Google Cloud. Free question with the correct answer and a full explanation.

Google Associate Cloud Engineer Question 355

Select 2Google Cloud Platform

You are responsible for setting up a Google Cloud environment for an application that requires frequent access to Google Cloud Storage and Google Cloud Pub/Sub. The application is deployed on multiple Compute Engine instances. Which of the following steps are necessary to ensure that the application on these instances can access the required services using a service account?

  1. A

    Create a new service account and assign it the 'Storage Object Viewer' and 'Pub/Sub Subscriber' roles.

  2. B

    Attach the service account to each Compute Engine instance with the required roles.

  3. C

    Enable the 'Cloud IAM API' on your Google Cloud project.

  4. D

    Install the 'gcloud' and 'gsutil' command-line tools on the Compute Engine instances.

Show answer and explanation

Correct answers: A, B

Explanation

To allow a Compute Engine instance to access Google Cloud resources like Cloud Storage and Pub/Sub, a service account with the necessary permissions must be created and attached to the instance. This setup ensures that the application can authenticate and interact with the services securely. Enabling specific APIs or installing command-line tools on the instance are not required steps for accessing these services through a service account.

  • A. Correct.

    Creating a new service account and assigning it the 'Storage Object Viewer' and 'Pub/Sub Subscriber' roles will grant it the necessary permissions to access Google Cloud Storage and Pub/Sub.

  • B. Correct.

    Attaching the service account to each Compute Engine instance allows the application running on these instances to use the service account's permissions to access other Google Cloud services.

  • C. Incorrect.

    Enabling the 'Cloud IAM API' is not necessary for using service accounts to access Google Cloud Storage and Pub/Sub.

  • D. Incorrect.

    Installing the 'gcloud' and 'gsutil' command-line tools is not required for the application to access Google Cloud Storage and Pub/Sub, unless the application specifically needs to use these tools.

Timed practice exam

Take a Google Associate Cloud Engineer practice test under exam conditions

60 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

More Google Associate Cloud Engineer practice questions

  1. 356.You have a Compute Engine instance that needs to access data stored in Google Cloud Storage. Which...
  2. 357.You are deploying a new application on Google Kubernetes Engine (GKE) that requires access to Cloud...
  3. 358.You are setting up a Google Cloud environment where a Compute Engine instance needs to access data...
  4. 359.You are managing a Google Cloud project where different services need to interact securely. You...
  5. 360.You are asked to set up a new service account in your Google Cloud project for an application that...
Back to the Google Associate Cloud Engineer exam dumps