4.2 Managing Service Accounts ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 5)

Questions 21–21

1. 21application · medium

   A developer needs to deploy a Cloud Function that reads from a Pub/Sub subscription. The function will be triggered by Pub/Sub messages. The team wants to follow least privilege. What is the most appropriate way to grant the required permissions?

   • ACreate a dedicated service account and grant it the Pub/Sub Subscriber role on the subscription.
   • BUse the default App Engine service account and grant it Pub/Sub Editor on the project.
   • CGrant the Cloud Functions service agent the Pub/Sub Subscriber role on the subscription.
   • DCreate a service account key and use it in the function code to authenticate.
   Reveal Solution Discussion Select an answer first