nerdexam
GoogleGoogle

PROFESSIONAL-CLOUD-DEVELOPER · Question #342

PROFESSIONAL-CLOUD-DEVELOPER Question #342: Real Exam Question with Answer & Explanation

Sign in or unlock PROFESSIONAL-CLOUD-DEVELOPER to reveal the answer and full explanation for question #342. The question stem and answer options stay visible for context.

Implementing Authentication and Authorization

Question

You are designing an application that shares PDF files containing time-sensitive information with users. The PDF files are saved in Cloud Storage. You need to provide secure access to the files. You have the following requirements: - Users should only have access to files that they are allowed to view. - Users should be able to request to read, write, or delete the PDF files for 24 hours. Not all users of the application have a Google account. How should you provide access to data objects?

Options

  • AConfigure the application to generate signed URLs with an expiration time of 24 hours. Share the
  • BProvide users with the Service Account Token Creator IAM role to impersonate the application's
  • CGenerate a service account that grants access to the POF files. Configure the application to
  • DAssign the Storage Object User IAM role to users that request access to the PDF files. Set an

Unlock PROFESSIONAL-CLOUD-DEVELOPER to see the answer

You've previewed enough free PROFESSIONAL-CLOUD-DEVELOPER questions. Unlock PROFESSIONAL-CLOUD-DEVELOPER for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Cloud Storage#Signed URLs#Access Control#Security
Full PROFESSIONAL-CLOUD-DEVELOPER PracticeBrowse All PROFESSIONAL-CLOUD-DEVELOPER Questions