Google
ASSOCIATE-CLOUD-ENGINEER · Question #387
You are developing an application that will be deployed on Google Cloud. The application will use a service account to retrieve data from BigQuery. Before you deploy your application, you want to test
Sign in or unlock ASSOCIATE-CLOUD-ENGINEER to reveal the answer and full explanation for question #387. The question stem and answer options stay visible for context.
Submitted by emma.c· Mar 30, 2026Configuring access and security
Question
You are developing an application that will be deployed on Google Cloud. The application will use a service account to retrieve data from BigQuery. Before you deploy your application, you want to test the permissions of this service account from your local machine to ensure there will be no authentication issues. You want to ensure that you use the most secure method while following Google-recommended practices. What should you do?
Options
- AGenerate a service account key, and configure the gcloud CLI to use this key. Issue a relevant
- BGrant the service account the BigQuery Administrator IAM role to ensure the service account has
- CConfigure the gcloud CLI to use service account impersonation. Issue a relevant BigQuery request
- DConfigure the gcloud CLI with Application Default Credentials using your user account. Issue a
Unlock ASSOCIATE-CLOUD-ENGINEER to see the answer
You've previewed enough free ASSOCIATE-CLOUD-ENGINEER questions. Unlock ASSOCIATE-CLOUD-ENGINEER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#service account impersonation#Application Default Credentials#IAM security#local development testing