
Ultimate access to all questions.
Your team has developed an application requiring access to both Cloud Storage and BigQuery. This application is containerized and will be deployed on Kubernetes Engine as well as on-premises. What is the most secure and efficient method for the application to authenticate with Google Cloud services?
A
Generate and download a key for a service account with the least privileges necessary for the required services, then use this key within the application for authentication.
B
Utilize the default service account provided for App Engine, assuming it has the necessary permissions.
C
Rely on the default service account for Compute Engine, assuming it has the necessary permissions.
D
Create a service account with editor-level permissions, generate and download a key, and use this key for authentication within the application.