1.2 Managing Service Accounts PROFESSIONAL-CLOUD-SECURITY-ENGINEER Practice Questions (Page 5)

Questions 21–22

1. 21foundation · easy

   A service account is no longer needed. What is the recommended way to prevent its use while preserving the ability to re-enable it later?

   • ADelete the service account.
   • BDisable the service account.
   • CRotate the service account keys.
   • DRevoke all IAM roles from the service account.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A project has a default Compute Engine service account that is not used by any workload. What is the recommended security practice for this service account?

   • ALeave it enabled, as it is required for all Compute Engine operations.
   • BDisable the service account and revoke its IAM roles.
   • CGrant it the Owner role to allow future workloads to use it.
   • DRotate its keys monthly to ensure security.
   Reveal Solution Discussion Select an answer first