Google Professional Cloud DevOps Engineer
Get started today
Ultimate access to all questions.
Comments
Loading comments...
Ultimate access to all questions.
You have deployed multiple Compute Engine instances in Google Cloud and need to make their monitoring metrics and logs accessible in Cloud Logging and Cloud Monitoring for your operations and security teams. How can you grant the necessary IAM roles to the Compute Engine service account while adhering to the principle of least privilege?
A
Grant the logging.logWriter and monitoring.metricWriter roles to the Compute Engine service accounts.
B
Grant the logging.admin and monitoring.editor roles to the Compute Engine service accounts.
C
Grant the logging.editor and monitoring.metricWriter roles to the Compute Engine service accounts.
D
Grant the logging.logWriter and monitoring.editor roles to the Compute Engine service accounts.