You have files in a Cloud Storage bucket that you need to share with your suppliers. You want to restrict the time that the files are available to your suppliers to 1 hour. You want to follow Google…

The correct answer is B. Create a service account with just the permissions to access files in the bucket. Create a JSON. This command correctly specifies the duration that the signed url should be valid for by using the -d flag. The default is 1 hour so omitting the -d flag would have also resulted in the same outcome. Times may be specified with no suffix (default hours), or with s = seconds, m…

Submitted by yuriko_h· Mar 30, 2026Configuring access and security

Question

You have files in a Cloud Storage bucket that you need to share with your suppliers. You want to restrict the time that the files are available to your suppliers to 1 hour. You want to follow Google recommended practices. What should you do?

Options

ACreate a service account with just the permissions to access files in the bucket. Create a JSON
BCreate a service account with just the permissions to access files in the bucket. Create a JSON
CCreate a service account with just the permissions to access files in the bucket. Create a JSON
DCreate a JSON key for the Default Compute Engine Service Account. Execute the command

How the community answered

(43 responses)

A
12% (5)
B
79% (34)
C
2% (1)
D
7% (3)

Explanation

This command correctly specifies the duration that the signed url should be valid for by using the -d flag. The default is 1 hour so omitting the -d flag would have also resulted in the same outcome. Times may be specified with no suffix (default hours), or with s = seconds, m = minutes, h = hours, d = days. The max duration allowed is 7d.

Topics

#signed URLs#service account#temporary access#Cloud Storage

Community Discussion

No community discussion yet for this question.

Full ASSOCIATE-CLOUD-ENGINEER Practice