Google
ASSOCIATE-CLOUD-ENGINEER · Question #315
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in the crm-databas
Sign in or unlock ASSOCIATE-CLOUD-ENGINEER to reveal the answer and full explanation for question #315. The question stem and answer options stay visible for context.
Submitted by javi_es· Mar 30, 2026Configuring access and security
Question
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in the crm-databases project. You want to follow Google-recommended practices to grant access to the service account in the web-applications project. What should you do?
Options
- AGrant "project owner" for web-applications appropriate roles to crm-databases.
- BGrant "project owner" role to crm-databases and the web-applications project.
- CGrant "project owner" role to crm-databases and roles/bigquery.dataViewer role to web-
- DGrant roles/bigquery.dataViewer role to crm-databases and appropriate roles to web-applications.
Unlock ASSOCIATE-CLOUD-ENGINEER to see the answer
You've previewed enough free ASSOCIATE-CLOUD-ENGINEER questions. Unlock ASSOCIATE-CLOUD-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#service accounts#cross-project IAM#BigQuery access#least privilege