Google Professional Cloud Developer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
You are deploying an application on a Compute Engine instance with Windows OS and Cloud SQL, using Cloud SQL Auth Proxy for connectivity. Following Google-recommended practices and the principle of least privilege, you have created a custom service account. What is the next step?
A
Create and assign a custom role with the cloudsql.instances.connect permission to the custom service account. Adjust the Cloud SQL Auth Proxy start command to specify your instance connection name.
B
Grant the custom service account the roles/cloudsql.client role. Adjust the Cloud SQL Auth Proxy start command to use the --unix-socket CLI option.
C
Grant the custom service account the roles/cloudsql.editor role.
D
Grant the custom service account the roles/cloudsql.viewer role. Adjust the Cloud SQL Auth Proxy start command to specify your instance connection name.