Google Exam Professional Cloud Security Engineer Topic 3 Question 33 Discussion

Actual exam question for Google's Professional Cloud Security Engineer exam

Question #: 33
Topic #: 3

[All Professional Cloud Security Engineer Questions]

You are a Security Administrator at your organization. You need to restrict service account creation capability within production environments. You want to accomplish this centrally across the organization. What should you do?

AUse Identity and Access Management (IAM) to restrict access of all users and service accounts that have access to the production environment.

BUse organization policy constraints/iam.disableServiceAccountKeyCreation boolean to disable the creation of new service accounts.

CUse organization policy constraints/iam.disableServiceAccountKeyUpload boolean to disable the creation of new service accounts.

DUse organization policy constraints/iam.disableServiceAccountCreation boolean to disable the creation of new service accounts.

Show Suggested Answer

Suggested Answer: A, C

https://cloud.google.com/kms/docs/secret-management

by Jani at May 03, 2022, 10:35 PM

Limited Time Offer

25%

Off

Get Premium Professional Cloud Security Engineer Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alpha

8 days ago

Option D is the correct answer. It's the only one that directly disables the creation of new service accounts, which is what the question asks for.

upvoted 0 times

...

Lewis

11 days ago

I believe option D is the correct answer, using organization policy constraints to disable service account creation.

upvoted 0 times

...

Elza

12 days ago

I agree with Vanna, using IAM would be the best way to centrally restrict service account creation.

upvoted 0 times

...

Vanna

14 days ago

I think we should use IAM to restrict access to service accounts.

upvoted 0 times

...