ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 116 - Associate Cloud Engineer discussion

Report
Export

You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web-applications project. What should you do?

A.
Give ''project owner'' for web-applications appropriate roles to crm-databases- proj
Answers
A.
Give ''project owner'' for web-applications appropriate roles to crm-databases- proj
B.
Give ''project owner'' role to crm-databases-proj and the web-applications project.
Answers
B.
Give ''project owner'' role to crm-databases-proj and the web-applications project.
C.
Give ''project owner'' role to crm-databases-proj and bigquery.dataViewer role to web-applications.
Answers
C.
Give ''project owner'' role to crm-databases-proj and bigquery.dataViewer role to web-applications.
D.
Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.
Answers
D.
Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.
Suggested answer: C

Explanation:

bigquery.dataViewer role provides permissions to read the datasets metadata and list tables in the dataset as well as Read data and metadata from the datasets tables. This is exactly what we need to fulfil this requirement and follows the least privilege principle.

Ref:https://cloud.google.com/iam/docs/understanding-roles#bigquery-roles

asked 18/09/2024
tho nguyen
32 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first