You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files a

Question

Options

• ACreate the instance with the default Compute Engine service account.
• BCreate the instance with the default Compute Engine service account.
• CCreate a new service account and assign this service account to the new instance.
• DCreate a new service account and assign this service account to the new instance.

• A
  4% (1)
• B
  8% (2)
• C
  88% (23)

Explanation

If an application uses third-party or custom identities and needs to access a resource, such as a BigQuery dataset or a Cloud Storage bucket, it must perform a transition between principals. Because Google Cloud APIs don't recognize third-party or custom identities, the application can't propagate the end-user's identity to BigQuery or Cloud Storage. Instead, the application has to perform the access by using a different Google identity. https://cloud.google.com/iam/docs/best-practices-for-using-and-managing-service-accounts

No community discussion yet for this question.