JencoMart, a global retailer with over 10,000 stores in 16 countries, is transitioning from its traditional on-premises infrastructure to Google Cloud Platform (GCP). The company currently hosts applications in 4 data centers and uses a LAMP stack hosted on dual-homed data centers in the US for their customer loyalty portal. As part of their migration strategy, JencoMart has decided to migrate user profile storage to Google Cloud Datastore and the application servers to Google Compute Engine (GCE). During the migration, the existing on-premises infrastructure will need secure access to Datastore to upload the data. What service account key-management strategy should you recommend?

Exam-Like

Provision service account keys for the on-premises infrastructure and for the GCE virtual machines (VMs)

17.2%

Authenticate the on-premises infrastructure with a user account and provision service account keys for the VMs

6.9%

Provision service account keys for the on-premises infrastructure and use Google Cloud Platform (GCP) managed keys for the VMs

75.9%

Deploy a custom authentication service on GCE/Google Kubernetes Engine (GKE) for the on-premises infrastructure and use GCP managed keys for the VMs

0.0%

Google Professional Cloud Architect