PROFESSIONAL-CLOUD-ARCHITECT · Question #71
Case Study: 3 - JencoMart Case Study Company Overview JencoMart is a global retailer with over 10,000 stores in 16 countries. The stores carry a range of goods, such as groceries, tires, and jewelry.
The correct answer is C. Provision service account keys for the on-premises infrastructure and use Google Cloud Platform. https://cloud.google.com/iam/docs/understanding-service- accounts#migrating_data_to_google_cloud_platform There are two types of service account keys: GCP-managed keys. These keys are used by Cloud Platform services such as App Engine and Compute Engine. They cannot be downloaded
Question
Options
- AProvision service account keys for the on-premises infrastructure and for the GCE virtual
- BAuthenticate the on-premises infrastructure with a user account and provision service account
- CProvision service account keys for the on-premises infrastructure and use Google Cloud Platform
- DDeploy a custom authentication service on GCE/Google Container Engine (GKE) for the on-
How the community answered
(35 responses)- A14% (5)
- B6% (2)
- C77% (27)
- D3% (1)
Explanation
https://cloud.google.com/iam/docs/understanding-service- accounts#migrating_data_to_google_cloud_platform There are two types of service account keys: GCP-managed keys. These keys are used by Cloud Platform services such as App Engine and Compute Engine. They cannot be downloaded, and are automatically rotated and used for signing for a maximum of two weeks. The rotation process is probabilistic; usage of the new key will gradually ramp up and down over the key's lifetime. We recommend caching the public key set for a service account for at most 24 hours to ensure that you always have access to the current key set. User-managed keys. These keys are created, downloadable, and managed by users. They expire 10 years from creation, and cease authenticating successfully when they are deleted from the service account.
Topics
Community Discussion
No community discussion yet for this question.