Practice Test 2 | Google Cloud Certified Professional Cloud Security Engineer | Dumps | Mock Test
Your company wants to use a Google Kubernetes Engine Cluster to run several applications in pods. The applications require access to different Google resources and APIs.
Which of the following is the recommended approach to grant access in a GKE environment?
A. Create a single service account for the cluster and grant a sum of all the permissions the different applications need.
B. Create a single user for the cluster and grant a sum of all the permissions the different applications need.
C. Create a service account and a Kubernetes service account for each application, then use Workload Identity to map service accounts to their corresponding Kubernetes service accounts.
D. Create a user account and a Kubernetes user account for each application, then use Workload Identity to map user accounts to their corresponding Kubernetes user accounts.
Correct Answer: C
- Option A is incorrect. This is not recommended because it leads to some applications having more permissions than they need.
- Option B is incorrect. Google resources use service accounts to access other services and APIs.
- Option C is CORRECT. The is the recommended approach.
- Option D is incorrect. Google resources use service accounts to access other services and APIs. Similarly, in Kubernetes pods (applications) use service accounts, not user accounts.
Reference:
Comments are closed, but trackbacks and pingbacks are open.