Answer-first summary for fast verification
Answer: When creating the instances, specify a Service Account for each instance.
The correct answer is A. When creating the instances, you should specify a Service Account for each instance. This can be done through the Compute Engine API or the Cloud Console. By doing so, the specified Service Account will be used when calling Google Cloud APIs from that instance. This ensures that each instance has the appropriate level of access as defined by its service account permissions from the moment it is created. Modifying service accounts after instances are running is less efficient and can lead to configuration errors.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
No comments yet.
You are managing multiple applications operating on various Compute Engine instances within the same Google Cloud project. Your goal is to determine which service account each individual instance should use when making calls to Google Cloud APIs. How would you assign specific service accounts to each instance to achieve a more detailed and tailored level of control?
A
When creating the instances, specify a Service Account for each instance.
B
When creating the instances, assign the name of each Service Account as instance metadata.
C
After starting the instances, use gcloud compute instances update to specify a Service Account for each instance.
D
After starting the instances, use gcloud compute instances update to assign the name of the relevant Service Account as instance metadata.