Easy1 markMultiple Choice
Domain 5.2: Managing service accountsIAMService AccountsSecurityFundamentals

GCP ACE · Question 45 · Domain 5.2: Managing service accounts

What is the primary purpose of a Service Account in Google Cloud?

Answer options:

A.

To act as a backup administrator account in case the primary owner gets locked out.

B.

To provide an identity for an application or compute instance to authenticate and access other Google Cloud services programmatically.

C.

To group multiple human users together for easier IAM role assignment.

D.

To provide a dedicated billing identity for cross-project chargebacks.

How to approach this question

Understand that Service Accounts are for machines/applications, not humans.

Full Answer

B.To provide an identity for an application or compute instance to authenticate and access other Google Cloud services programmatically.✓ Correct
To provide an identity for an application or compute instance to authenticate and access other Google Cloud services programmatically.
A Service Account is a special kind of account used by an application or a virtual machine (VM), not a person. Applications use service accounts to make authorized API calls. For example, if an application running on Compute Engine needs to read data from Cloud Storage, you attach a service account to the VM and grant that service account the 'Storage Object Viewer' role. This allows the application to authenticate securely without embedding human user credentials in the code.

Common mistakes

Confusing Service Accounts with Google Groups or human admin accounts.

Practice the full GCP Associate Cloud Engineer Practice Exam 6

50 questions · hints · full answers · grading

More questions from this exam