Practice Test 3 | Google Cloud Certified Professional Cloud Architect | Dumps | Mock Test

Your company’s development teams use, as required by internal rules, service accounts.

They just forget to delete the service accounts that are no longer used.

A coordinator noticed the problem and ordered them to clean up.

Now your team is faced with a huge, boring, and potentially dangerous job and has asked you for help.

What advice can you give him?

A. Service account insights
B. Cloud Audit Logs
C. Activity Analyzer
D. Flow logs

Correct Answers: A and C

The best way to find out service accounts usage are:

Service account insights, that lists service accounts not used in the past 90 days and
Activity Analyzer, which reports about service account’s last usages.

So they let you control the opposite aspects.

B is wrong because Cloud Audit Logs contain audit trials, that is user activity and services modifications in GCP.
D is wrong because Flow logs contain only network information to and from VM instances.

For any further detail:

PCA