MENU
Your team is creating a serverless web application on Cloud Run. The application needs to access images stored in a private Cloud Storage bucket. You want to give the application Identity and Access Management (IAM) permission to access the images in the bucket, while also securing the services using Google-recommended best practices What should you do?
Suggested Answer: B
Get Premium Professional Cloud Developer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
32 comments · newest first
JA
Jaclyn
11 months ago
Signed URLs? Sounds complicated, not sure if I trust that.
CO
Cornell
11 months ago
Public access prevention is a must, so D is solid too.
KA
Kallie
11 months ago
Wait, why not just use the default service account?
KA
Kara
11 months ago
I agree, using a user-managed service account is a good practice!
RE
Rebecka
12 months ago
Option C seems like the best choice for security.
LE
Levi
12 months ago
I believe public access prevention is crucial for security, but I can't remember if it was necessary to enforce signed URLs as well.
AL
Alishia
1 year ago
I'm a bit confused about whether to grant permissions to the Compute Engine default service account or a user-managed one. I feel like the user-managed option is safer.
EL
Elli
1 year ago
I think we practiced a question similar to this one, and I recall that enforcing signed URLs can help with secure access to private buckets.
AV
Avery
1 year ago
I remember we discussed the importance of using user-managed service accounts for better security, but I'm not sure if that's the right approach here.
PE
Pearline
1 year ago
This seems like a good opportunity to demonstrate my knowledge of IAM and Cloud Storage security. I'm feeling confident I can tackle this question.
AS
Ashton
1 year ago
I'm a little confused about the best practices part of the question. I'll need to make sure I understand the Google-recommended security guidelines before answering.
CH
Chantay
1 year ago
Okay, the key here is to use a user-managed service account for the Cloud Run service and grant the appropriate IAM role on the bucket. I've got a good strategy for this.
VA
Van
1 year ago
This looks like a straightforward IAM and Cloud Storage question. I think I can handle this one.
BE
Bernardo
1 year ago
Hmm, I'm a bit unsure about the difference between signed URLs and public access prevention. I'll need to review those concepts before attempting this.
FA
Farrah
1 year ago
Okay, let me think this through. I'm guessing the non-operational email would go to leads that have been blacklisted, so I'll select option C.
JA
Janey
2 years ago
Option C all the way! Signed URLs and a dedicated service account? That's like a superhero duo for cloud security!
JA
Janna
2 years ago
This question is a real head-scratcher! I feel like I need a crystal ball to figure out the right answer.
TH
Theresia
2 years ago
I'm not sure, but D also sounds like a good choice.
TO
Tomoko
2 years ago
Hmm, I'm not sure. Signed URLs can be a bit of a hassle to manage. I'm leaning more towards Option D, using a user-managed service account and enforcing public access prevention.
EN
Enola
2 years ago
It's always better to err on the side of caution when it comes to securing access to sensitive data. Option D seems like the safest bet.
DI
Dick
2 years ago
Enforcing signed URLs can be complex to manage, so opting for a user-managed service account seems like a more straightforward approach.
BE
Bernadine
2 years ago
I agree, it's important to prioritize security when accessing private data. Enforcing public access prevention is a good practice.
TR
Trevor
2 years ago
Option D sounds like a good choice. Using a user-managed service account adds an extra layer of security.
GA
Gail
2 years ago
I agree with Alisha. Option C is the way to go. Protecting the bucket with signed URLs and using a dedicated service account is the most secure solution.
GI
Gilma
2 years ago
Definitely, it's important to follow Google's best practices for securing services in Cloud Run.
MA
Marva
2 years ago
I agree, using signed URLs and a dedicated service account is the way to go to protect the bucket.
FA
Fanny
2 years ago
I think option C is the best choice. It provides the most secure solution for accessing the images.
YA
Yasuko
2 years ago
I agree with Ming, C seems like the best option.
MI
Ming
2 years ago
I think the answer is C.
AL
Alisha
2 years ago
Option C seems like the best approach to me. Using a user-managed service account and enforcing signed URLs is a great way to secure the access to the private bucket.
EU
Eun
2 years ago
Enforcing signed URLs is a good practice. It helps secure access to the private bucket.
HY
Hyman
2 years ago
Option C seems like the best approach. It's important to use a user-managed service account for security.