Your organization has a busy transactional Cloud SQL for MySQL instance. Your analytics team needs access to the data so they can build monthly sales reports. You need to provide data access to the…

Question

Options

• ACreate a read replica of the database, provide the database IP address, username, and password
• BCreate a read replica of the database, enable the cloudsql.iam_authentication flag on the replica,
• CEnable the cloudsql.iam_authentication flag on the primary database instance, and grant read
• DProvide the database IP address, username, and password of the primary database instance to

• A
  3% (1)
• B
  77% (30)
• C
  15% (6)
• D
  5% (2)

Explanation

Two goals must be met: isolate analytics from production performance and use secure access patterns. Creating a read replica offloads heavy analytics queries from the primary transactional instance, protecting production performance. Enabling cloudsql.iam_authentication on the replica and granting access via IAM follows Google Cloud security best practices - IAM-based auth is more secure than sharing static username/password credentials, and it enables centralized access control and auditing. Option A shares raw credentials instead of using IAM. Option C uses IAM auth but queries the primary instance, impacting production performance. Option D queries the primary directly with credentials - worst for both performance and security.

No community discussion yet for this question.