MENU
You are creating and running containers across different projects in Google Cloud. The application you are developing needs to access Google Cloud services from within Google Kubernetes Engine (GKE).
What should you do?
Suggested Answer: B
Get Premium Professional Cloud Developer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
27 comments · newest first
NO
Norah
5 months ago
C is risky. Storing credentials isn't safe.
AR
Arleen
6 months ago
Option A seems easier, but B is more secure.
HE
Herschel
6 months ago
I agree, B makes sense. It avoids managing keys.
ES
Estrella
6 months ago
I think option B is the best. Workload Identity is secure.
BR
Brynn
6 months ago
I thought A was the standard approach. Surprised to see B getting so much love!
LA
Lacresha
6 months ago
I think D is overkill for most projects.
GA
Gail
6 months ago
Wait, storing credentials as a Secret? Isn't that risky?
BE
Ben
7 months ago
A is a solid choice too, but B feels more secure.
TA
Tatum
7 months ago
Definitely B, Workload Identity is the way to go!
ES
Esteban
7 months ago
B) Use a Google service account to run the Pod with Workload Identity. This is the way to go, unless you want to accidentally grant your entire cluster access to your Google Cloud resources.
SA
Sage
7 months ago
Hmm, I wonder if the exam will also ask about the best way to store my Google service account password - maybe in a Post-it note on my monitor?
PH
Phuong
7 months ago
C) Store the Google service account credentials as a Kubernetes Secret. This is not the best approach, as it can lead to security risks.
SE
Selma
8 months ago
A) Assign a Google service account to the GKE nodes. This is a valid approach, but Workload Identity is the recommended way to access Google Cloud services.
RA
Raul
8 months ago
D) Use a Google service account with GKE role-based access control (RBAC). This option provides more granular control over permissions.
RO
Ronald
8 months ago
B) Use a Google service account to run the Pod with Workload Identity. This is the correct approach to access Google Cloud services from within GKE.
AV
Avery
8 months ago
Using RBAC with a service account sounds familiar, but I’m not clear on how it integrates with GKE for accessing other services.
SH
Shawnda
9 months ago
I feel like storing the service account credentials as a Kubernetes Secret could lead to security issues, but I can't recall the specifics.
CL
Clarence
9 months ago
I remember practicing a similar question, and I think assigning a service account to the GKE nodes might not be the most secure choice.
DE
Deandrea
9 months ago
I think using a service account with Workload Identity is the best option, but I'm not entirely sure how it works in GKE.
MA
Makeda
9 months ago
Okay, I've got it. Option B is the way to go. Workload Identity is the recommended approach for accessing Google Cloud services from within GKE. It's more secure than the other options.
VE
Vernice
9 months ago
I'm a little confused by all the options, but I think option B is the best choice. Workload Identity seems like the most efficient and secure way to handle this use case.
LE
Lettie
10 months ago
Option B is definitely the way to go here. Workload Identity is the recommended approach for accessing Google Cloud services from GKE. It's more secure than storing credentials as a Kubernetes Secret.
DI
Dion
10 months ago
Hmm, I'm a bit unsure about this one. I'll need to double-check the documentation to make sure I understand the differences between the options. Assigning a service account to the nodes or using RBAC could also work, but Workload Identity sounds like the best approach.
AL
Albina
10 months ago
I think I'd go with option B. Using Workload Identity seems like the most secure and straightforward way to access Google Cloud services from within GKE.
KI
Kizzy
4 months ago
I like that it avoids storing sensitive credentials in the cluster.
JA
Jade
4 months ago
Workload Identity makes it easier to manage permissions too.
ST
Staci
4 months ago
I agree, option B is definitely the best choice.