ASSOCIATE-CLOUD-ENGINEER · Question #67
ASSOCIATE-CLOUD-ENGINEER Question #67: Real Exam Question with Answer & Explanation
The correct answer is A: Create a signed URL with a four-hour expiration and share the URL with the company.. Signed URLs are used to give time-limited resource access to anyone in possession of the URL, regardless of whether they have a Google account. https://cloud.google.com/storage/docs/access-control/signed-urls
Question
You have an object in a Cloud Storage bucket that you want to share with an external company. The object contains sensitive data. You want access to the content to be removed after four hours. The external company does not have a Google account to which you can grant specific user-based access privileges. You want to use the most secure method that requires the fewest steps. What should you do?
Options
- ACreate a signed URL with a four-hour expiration and share the URL with the company.
- BSet object access to `public' and use object lifecycle management to remove the object after four
- CConfigure the storage bucket as a static website and furnish the object's URL to the company.
- DCreate a new Cloud Storage bucket specifically for the external company to access.
Explanation
Signed URLs are used to give time-limited resource access to anyone in possession of the URL, regardless of whether they have a Google account. https://cloud.google.com/storage/docs/access-control/signed-urls
Community Discussion
No community discussion yet for this question.