nerdexam
Google

PROFESSIONAL-CLOUD-ARCHITECT · Question #323

Your company's development teams use, as required by internal rules, service accounts. They just forget to delete the service accounts that are no longer used. A coordinator noticed the problem and…

The correct answer is A. Service account insights C. Activity Analyzer. The best way to find out service accounts usage are: Service account insights, that lists service accounts not used in the past 90 days and Activity Analyzer, which reports about service account's last usages. So they let you control the opposite aspects. B is wrong because…

Submitted by devops_kid· Mar 30, 2026Designing for security and compliance

Question

Your company's development teams use, as required by internal rules, service accounts. They just forget to delete the service accounts that are no longer used. A coordinator noticed the problem and ordered them to clean up. Now your team is faced with a huge, boring, and potentially dangerous job and has asked you for help. What advice can you give him?

Options

  • AService account insights
  • BCloud Audit Logs
  • CActivity Analyzer
  • DFlow logs

How the community answered

(35 responses)
  • A
    83% (29)
  • B
    11% (4)
  • D
    6% (2)

Explanation

The best way to find out service accounts usage are: Service account insights, that lists service accounts not used in the past 90 days and Activity Analyzer, which reports about service account's last usages. So they let you control the opposite aspects. B is wrong because Cloud Audit Logs contain audit trials, that is user activity and services modifications in GCP. D is wrong because Flow logs contain only network information to and from VM instances.

Topics

#service account insights#Activity Analyzer#IAM cleanup#unused service accounts

Community Discussion

No community discussion yet for this question.

Full PROFESSIONAL-CLOUD-ARCHITECT Practice