Your organization acquired a new workload. The Web and Application (App) servers will be running on Compute Engine in a newly created custom VPC. You are responsible for configuring a secure network…

Question

Options

• A
  1. Configure all running Web and App servers with respective network tags. 2. Create an allow
• B
  1. Configure all running Web and App servers with respective service accounts. 2. Create an
• C
  1. Re-deploy the Web and App servers with instance templates configured with respective
• D
  1. Re-deploy the Web and App servers with instance templates configured with respective service

• A
  5% (1)
• B
  5% (1)
• C
  11% (2)
• D
  79% (15)

Explanation

https://cloud.google.com/vpc/docs/firewalls#service-accounts-vs-tags A service account represents an identity associated with an instance. Only one service account can be associated with an instance. You control access to the service account by controlling the grant of the Service Account User role for other IAM principals. For an IAM principal to start an instance by using a service account, that principal must have the Service Account User role to at least use that service account and appropriate permissions to create instances (for example, having the Compute Engine Instance Admin role to the project).

No community discussion yet for this question.