Configuring access
Practise only this domain. 24 questions with explanations, 20 at a time.
Start configuring accessSample questions
- Several pods on the same GKE node need different Cloud Storage permissions. Which feature lets each pod authenticate to Google Cloud APIs with its own IAM identity instead of the node's service account?Medium
- Every Compute Engine instance in a business unit's folder should authorize administrator logins through IAM roles, not through public keys stored in instance or project metadata. What is the most centralized way to enforce this?Hard
- After a service account's key surfaced in a public repository, responders must list every project, folder, and bucket that the identity can reach, including access inherited from higher levels. Which tool gives them that view?Hard