MENU
[Building and implementing service monitoring strategies]
A third-party application needs to have a service account key to work properly When you try to export the key from your cloud project you receive an error "The organization policy constraint larn.disableServiceAccountKeyCreation is enforcedM You need to make the third-party application work while following Google-recommended security practices What should you do?
Suggested Answer: D
Get Premium Professional Cloud DevOps Engineer Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
GL
Glory
3 months ago
I agree, D is a good compromise.
LA
Laticia
4 months ago
But we need to think about security first. D balances both.
KA
Katie
4 months ago
Still, B gives full control. What if we need more keys later?
AR
Arlette
4 months ago
True, D seems safer. It modifies just for the project.
GL
Glory
5 months ago
But B could lead to security risks. Better to keep some policies.
KA
Katie
6 months ago
I prefer option B. It removes the restriction completely.
LA
Laticia
6 months ago
It allows creating a key while following security practices.
AR
Arlette
6 months ago
Why D?
LA
Laticia
6 months ago
I think option D is the best choice.
DA
Daisy
6 months ago
Isn’t it against best practices to create service account keys like that?
IN
India
6 months ago
I’ve always gone with option C in the past. Works fine!
DI
Dino
7 months ago
Wait, can you really disable that policy at the project level? Sounds risky.
CH
Chana
7 months ago
No way, option B seems more straightforward!
AR
Arleen
7 months ago
I think option D is the best choice here.
LE
Lelia
7 months ago
B) is the way to go. Who wants to deal with all that policy mumbo-jumbo anyway? Just remove it and get the job done.
IV
Ivan
7 months ago
Haha, enabling the default key in A) sounds like a recipe for disaster. Gotta follow those security practices!
SH
Sheridan
8 months ago
Hmm, I'm not sure about this one. Disabling the policy at the project level in C) seems like it could work too.
LU
Luther
8 months ago
D) sounds like a good option, but it's better to remove the policy at the organization level as suggested in B).
VI
Vicki
8 months ago
B) is the correct answer. Removing the policy at the organization level is the way to go.
DO
Dortha
8 months ago
I recall that removing organization policies can lead to compliance issues. I wonder if option C is the safest bet here.
PA
Paola
9 months ago
I’m not entirely sure, but I think enabling the default service account key isn’t a good idea. It could expose us to security issues.
LA
Lauryn
9 months ago
This question feels familiar! I think I practiced something similar where we had to manage service account permissions. I’m leaning towards option D.
TI
Tish
9 months ago
I remember studying about service account keys and the importance of not disabling security policies. I think option B might be risky.
EV
Evette
9 months ago
Hmm, I'm not sure about disabling the policy at the project level. That might not be the best approach from a security standpoint. I'll need to think this through carefully.
MA
Magdalene
9 months ago
This seems straightforward to me. The policy is set at the organization level, so we'll need to remove it there in order to create the key. Option B looks like the right choice.
ED
Edward
10 months ago
I'm a bit confused by the wording of the question. Is the goal to enable the default service account key, or to create a new one? I'll need to double-check the details before selecting an answer.
TI
Tien
10 months ago
Okay, I think I understand the issue. The organization has a policy in place that's preventing us from creating a service account key. We'll need to find a way to work around that while still following best practices.
ER
Eric
10 months ago
Hmm, this looks like a tricky one. I'll need to carefully read through the options and think about the security implications of each approach.
LO
Lovetta
3 months ago
Option C sounds tempting, but I’m not sure about disabling the policy.
LE
Leota
3 months ago
I’m leaning towards option B. Removing the policy could be risky though.
TA
Tammara
3 months ago
I think option D might be the best choice. It keeps security in mind.