Practice Test 1 | Google Cloud Certified Associate Cloud Engineer | Dumps | Mock Test
You are trying to fetch metadata of a VM using “curl metadata.google.internal/computeMetadata/v1/” command but are constantly receiving 403 Forbidden. What could be the possible reason?
A. Service account is missing.
B. Metadata-Flavor: Google header is missing.
C. Metadata-Access: Google header is missing.
D. Firewall rule attached to the VM is blocking the request.
Explanation:
Correct Answer – B
Option B is correct: While querying metadata of an instance you must provide header “Metadata-Flavor: Google”. This header indicates that the request was sent with the intention of retrieving metadata values, rather than unintentionally from an insecure source, and allows the metadata server to return the data you requested. If you do not provide this header, the metadata server denies your request.
Option A is incorrect: Service account has nothing to do with the retrieval of metadata.
Option C is incorrect: Metadata-Access: Google is an invalid header.
Option D is incorrect: Firewall rule has nothing to do with metadata querying permission. If it would have been a firewall, we would not even receive a response but in this case, we are receiving 403 Forbidden response from the server.
Reference:
https://cloud.google.com/compute/docs/storing-retrieving-metadata
Comments are closed, but trackbacks and pingbacks are open.