Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Google Professional Cloud Developer Exam - Topic 14 Question 92 Discussion

Your team is creating a serverless web application on Cloud Run. The application needs to access images stored in a private Cloud Storage bucket. You want to give the application Identity and Access Management (IAM) permission to access the images in the bucket, while also securing the services using Google-recommended best practices What should you do?
B) Enforce public access prevention for the desired bucket. Grant the Storage Object Viewer IAM role on the bucket to the Compute Engine default service account.
A) Enforce signed URLs for the desired bucket. Grant the Storage Object Viewer IAM role on the bucket to the Compute Engine default service account.
C) Enforce signed URLs for the desired bucket Create and update the Cloud Run service to use a user -managed service account. Grant the Storage Object Viewer IAM role on the bucket to the service account
D) Enforce public access prevention for the desired bucket. Create and update the Cloud Run service to use a user-managed service account. Grant the Storage Object Viewer IAM role on the bucket to the service account.

Google Professional Cloud Developer Exam - Topic 14 Question 92 Discussion

Actual exam question for Google's Professional Cloud Developer exam
Question #: 92
Topic #: 14
[All Professional Cloud Developer Questions]

Your team is creating a serverless web application on Cloud Run. The application needs to access images stored in a private Cloud Storage bucket. You want to give the application Identity and Access Management (IAM) permission to access the images in the bucket, while also securing the services using Google-recommended best practices What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Lenora at Sep 15, 2024, 07:13 AM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Developer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Jaclyn
7 months ago
Signed URLs? Sounds complicated, not sure if I trust that.
upvoted 0 times
...
Cornell
8 months ago
Public access prevention is a must, so D is solid too.
upvoted 0 times
...
Kallie
8 months ago
Wait, why not just use the default service account?
upvoted 0 times
...
Kara
8 months ago
I agree, using a user-managed service account is a good practice!
upvoted 0 times
...
Rebecka
8 months ago
Option C seems like the best choice for security.
upvoted 0 times
...
Levi
9 months ago
I believe public access prevention is crucial for security, but I can't remember if it was necessary to enforce signed URLs as well.
upvoted 0 times
...
Alishia
9 months ago
I'm a bit confused about whether to grant permissions to the Compute Engine default service account or a user-managed one. I feel like the user-managed option is safer.
upvoted 0 times
...
Elli
9 months ago
I think we practiced a question similar to this one, and I recall that enforcing signed URLs can help with secure access to private buckets.
upvoted 0 times
...
Avery
9 months ago
I remember we discussed the importance of using user-managed service accounts for better security, but I'm not sure if that's the right approach here.
upvoted 0 times
...
Pearline
9 months ago
This seems like a good opportunity to demonstrate my knowledge of IAM and Cloud Storage security. I'm feeling confident I can tackle this question.
upvoted 0 times
...
Ashton
9 months ago
I'm a little confused about the best practices part of the question. I'll need to make sure I understand the Google-recommended security guidelines before answering.
upvoted 0 times
...
Chantay
9 months ago
Okay, the key here is to use a user-managed service account for the Cloud Run service and grant the appropriate IAM role on the bucket. I've got a good strategy for this.
upvoted 0 times
...
Van
9 months ago
This looks like a straightforward IAM and Cloud Storage question. I think I can handle this one.
upvoted 0 times
...
Bernardo
9 months ago
Hmm, I'm a bit unsure about the difference between signed URLs and public access prevention. I'll need to review those concepts before attempting this.
upvoted 0 times
...
Farrah
9 months ago
Okay, let me think this through. I'm guessing the non-operational email would go to leads that have been blacklisted, so I'll select option C.
upvoted 0 times
...
Janey
2 years ago
Option C all the way! Signed URLs and a dedicated service account? That's like a superhero duo for cloud security!
upvoted 0 times
...
Janna
2 years ago
This question is a real head-scratcher! I feel like I need a crystal ball to figure out the right answer.
upvoted 0 times
...
Theresia
2 years ago
I'm not sure, but D also sounds like a good choice.
upvoted 0 times
...
Tomoko
2 years ago
Hmm, I'm not sure. Signed URLs can be a bit of a hassle to manage. I'm leaning more towards Option D, using a user-managed service account and enforcing public access prevention.
upvoted 0 times
Enola
2 years ago
It's always better to err on the side of caution when it comes to securing access to sensitive data. Option D seems like the safest bet.
upvoted 0 times
...
Dick
2 years ago
Enforcing signed URLs can be complex to manage, so opting for a user-managed service account seems like a more straightforward approach.
upvoted 0 times
...
Bernadine
2 years ago
I agree, it's important to prioritize security when accessing private data. Enforcing public access prevention is a good practice.
upvoted 0 times
...
Trevor
2 years ago
Option D sounds like a good choice. Using a user-managed service account adds an extra layer of security.
upvoted 0 times
...
...
Gail
2 years ago
I agree with Alisha. Option C is the way to go. Protecting the bucket with signed URLs and using a dedicated service account is the most secure solution.
upvoted 0 times
Gilma
2 years ago
Definitely, it's important to follow Google's best practices for securing services in Cloud Run.
upvoted 0 times
...
Marva
2 years ago
I agree, using signed URLs and a dedicated service account is the way to go to protect the bucket.
upvoted 0 times
...
Fanny
2 years ago
I think option C is the best choice. It provides the most secure solution for accessing the images.
upvoted 0 times
...
...
Yasuko
2 years ago
I agree with Ming, C seems like the best option.
upvoted 0 times
...
Ming
2 years ago
I think the answer is C.
upvoted 0 times
...
Alisha
2 years ago
Option C seems like the best approach to me. Using a user-managed service account and enforcing signed URLs is a great way to secure the access to the private bucket.
upvoted 0 times
Eun
2 years ago
Enforcing signed URLs is a good practice. It helps secure access to the private bucket.
upvoted 0 times
...
Hyman
2 years ago
Option C seems like the best approach. It's important to use a user-managed service account for security.
upvoted 0 times
...
...

Save Cancel