Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Database Engineer Exam - Topic 10 Question 64 Discussion

You are deploying a new Cloud SQL instance on Google Cloud using the Cloud SQL Auth proxy. You have identified snippets of application code that need to access the new Cloud SQL instance. The snippets reside and execute on an application server running on a Compute Engine machine. You want to follow Google-recommended practices to set up Identity and Access Management (IAM) as quickly and securely as possible. What should you do?
C) For the application server, set up a service account.
A) For each application code, set up a common shared user account.
B) For each application code, set up a dedicated user account.
D) For the application server, set up a common shared user account.

Google Professional Cloud Database Engineer Exam - Topic 10 Question 64 Discussion

Actual exam question for Google's Professional Cloud Database Engineer exam
Question #: 64
Topic #: 10
[All Professional Cloud Database Engineer Questions]

You are deploying a new Cloud SQL instance on Google Cloud using the Cloud SQL Auth proxy. You have identified snippets of application code that need to access the new Cloud SQL instance. The snippets reside and execute on an application server running on a Compute Engine machine. You want to follow Google-recommended practices to set up Identity and Access Management (IAM) as quickly and securely as possible. What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: C

https://cloud.google.com/sql/docs/mysql/sql-proxy#using-a-service-account


by Elouise at Nov 24, 2025, 08:38 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Database Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Francine
3 months ago
Yeah, C is definitely the way to go for IAM best practices.
upvoted 0 times
...
Howard
3 months ago
I feel like A is too risky. Shared accounts can cause issues.
upvoted 0 times
...
Aja
3 months ago
True, but C is recommended for automation.
upvoted 0 times
...
Serina
3 months ago
But what about B? Dedicated accounts seem safer.
upvoted 0 times
...
Jani
3 months ago
I agree, C makes sense. It’s more manageable.
upvoted 0 times
...
Andra
3 months ago
I think option C is the best. Service accounts are secure.
upvoted 0 times
...
Stephaine
4 months ago
Totally agree with B, dedicated accounts help with auditing too.
upvoted 0 times
...
Slyvia
4 months ago
Wait, why would anyone use a shared account? That sounds risky!
upvoted 0 times
...
Cyril
4 months ago
C is definitely the best practice for service accounts.
upvoted 0 times
...
Adria
5 months ago
I disagree, A seems easier to manage.
upvoted 0 times
...
Hannah
5 months ago
B is the way to go! Dedicated accounts are more secure.
upvoted 0 times
...
Agustin
5 months ago
I'd go with C. Service accounts are the way of the future, my friend.
upvoted 0 times
...
Allene
5 months ago
B) and C) are the way to go. Gotta keep that security tight, you know?
upvoted 0 times
...
Karon
5 months ago
C) For the application server, set up a service account. This is the recommended practice by Google.
upvoted 0 times
...
Sabrina
5 months ago
B) For each application code, set up a dedicated user account. This ensures better security and accountability.
upvoted 0 times
...
Florinda
6 months ago
I’m a bit confused about whether a common shared user account is ever recommended. I thought we should avoid that for security reasons.
upvoted 0 times
...
Vanesa
6 months ago
This question seems similar to one we practiced about IAM roles. I feel like using a common shared user account could lead to security risks.
upvoted 0 times
...
Gracie
6 months ago
I’m not entirely sure, but I think setting up a service account for the application server might be the best practice.
upvoted 0 times
...
Mollie
6 months ago
I'm not totally sure about the shared user account options. I'll need to double-check the security implications of those approaches.
upvoted 0 times
...
Shenika
6 months ago
This seems straightforward. I'd go with option C and set up a service account for the application server to access the Cloud SQL instance.
upvoted 0 times
...
Maybelle
6 months ago
Okay, I think I've got a strategy here. I'll focus on setting up the IAM securely, likely using a service account for the application server.
upvoted 0 times
...
Tandra
7 months ago
I remember we discussed the importance of using dedicated user accounts for different applications to enhance security.
upvoted 0 times
...
Sheridan
7 months ago
Haha, a common shared user account? What is this, the Stone Age?
upvoted 0 times
...
Jaclyn
8 months ago
Hmm, I'm a bit confused on the best way to handle the IAM for this Cloud SQL instance. I'll need to review the Google-recommended practices.
upvoted 0 times
...
Carmela
8 months ago
This looks like a tricky IAM setup question. I'll need to think through the different options carefully.
upvoted 0 times
Claudia
2 months ago
Yeah, I’d stick with the service account for better IAM practices.
upvoted 0 times
...
Yuonne
2 months ago
Shared accounts can lead to security issues. Better to avoid them.
upvoted 0 times
...
Lanie
7 months ago
I agree, a service account seems more secure for the application server.
upvoted 0 times
...
Ramonita
7 months ago
This is definitely tricky! I think a service account might be the best option.
upvoted 0 times
...
Octavio
7 months ago
But what about dedicated user accounts? They could work too, right?
upvoted 0 times
...
...

Save Cancel