Practice Test 1 | Google Cloud Certified Associate Cloud Engineer | Dumps | Mock Test
Your company has decided to build an in-house application for payroll processing, and you have been assigned task to create a VM, Cloud SQL DB and bucket for the same. While testing the application, developers found that they couldn’t upload files to bucket. How would you fix it?
A. Enable ufw on linux instance and allow port 443.
B. Check if the default service account is attached to VM, if not edit the instance and attach it.
C. Check if egress firewall rules are applied to instance allowing connection between bucket and VM.
D. None of the above.
Explanation:
Correct Answer – D
D is correct: There are two ways to achieve it:
- Create a custom service account with write permission for Storage service and attach it to instance.
- While launching the instance under Identity and API access section stick to default service account, click on “Set access for API” and select either Write Only or Read Write scope for your instance.
A is incorrect: ufw is a virtual software based linux firewall. It has no role in allowing or blocking connections to bucket.
B is incorrect: Default service account does not allow write permission on bucket, hence attaching it will be of no use.
C is incorrect: By default, all egress traffic is allowed, hence you do not have to explicitly allow any port.
Reference:
https://cloud.google.com/compute/docs/access/service-accounts
Comments are closed, but trackbacks and pingbacks are open.