Apr
06
2024

Google Cloud Professional DevOps Engineer Q117

question-and-answer
  1. Google Cloud Professional DevOps Engineer Q1
  2. Google Cloud Professional DevOps Engineer Q2
  3. Google Cloud Professional DevOps Engineer Q3
  4. Google Cloud Professional DevOps Engineer Q4
  5. Google Cloud Professional DevOps Engineer Q5
  6. Google Cloud Professional DevOps Engineer Q6
  7. Google Cloud Professional DevOps Engineer Q7
  8. Google Cloud Professional DevOps Engineer Q8
  9. Google Cloud Professional DevOps Engineer Q9
  10. Google Cloud Professional DevOps Engineer Q10
  11. Google Cloud Professional DevOps Engineer Q11
  12. Google Cloud Professional DevOps Engineer Q12
  13. Google Cloud Professional DevOps Engineer Q13
  14. Google Cloud Professional DevOps Engineer Q14
  15. Google Cloud Professional DevOps Engineer Q15
  16. Google Cloud Professional DevOps Engineer Q16
  17. Google Cloud Professional DevOps Engineer Q17
  18. Google Cloud Professional DevOps Engineer Q18
  19. Google Cloud Professional DevOps Engineer Q19
  20. Google Cloud Professional DevOps Engineer Q20
  21. Google Cloud Professional DevOps Engineer Q21
  22. Google Cloud Professional DevOps Engineer Q22
  23. Google Cloud Professional DevOps Engineer Q23
  24. Google Cloud Professional DevOps Engineer Q24
  25. Google Cloud Professional DevOps Engineer Q25
  26. Google Cloud Professional DevOps Engineer Q26
  27. Google Cloud Professional DevOps Engineer Q27
  28. Google Cloud Professional DevOps Engineer Q28
  29. Google Cloud Professional DevOps Engineer Q29
  30. Google Cloud Professional DevOps Engineer Q30
  31. Google Cloud Professional DevOps Engineer Q31
  32. Google Cloud Professional DevOps Engineer Q32
  33. Google Cloud Professional DevOps Engineer Q33
  34. Google Cloud Professional DevOps Engineer Q34
  35. Google Cloud Professional DevOps Engineer Q35
  36. Google Cloud Professional DevOps Engineer Q36
  37. Google Cloud Professional DevOps Engineer Q37
  38. Google Cloud Professional DevOps Engineer Q38
  39. Google Cloud Professional DevOps Engineer Q39
  40. Google Cloud Professional DevOps Engineer Q40
  41. Google Cloud Professional DevOps Engineer Q41
  42. Google Cloud Professional DevOps Engineer Q42
  43. Google Cloud Professional DevOps Engineer Q43
  44. Google Cloud Professional DevOps Engineer Q44
  45. Google Cloud Professional DevOps Engineer Q45
  46. Google Cloud Professional DevOps Engineer Q46
  47. Google Cloud Professional DevOps Engineer Q47
  48. Google Cloud Professional DevOps Engineer Q48
  49. Google Cloud Professional DevOps Engineer Q49
  50. Google Cloud Professional DevOps Engineer Q50
  51. Google Cloud Professional DevOps Engineer Q51
  52. Google Cloud Professional DevOps Engineer Q52
  53. Google Cloud Professional DevOps Engineer Q53
  54. Google Cloud Professional DevOps Engineer Q54
  55. Google Cloud Professional DevOps Engineer Q55
  56. Google Cloud Professional DevOps Engineer Q56
  57. Google Cloud Professional DevOps Engineer Q57
  58. Google Cloud Professional DevOps Engineer Q58
  59. Google Cloud Professional DevOps Engineer Q59
  60. Google Cloud Professional DevOps Engineer Q60
  61. Google Cloud Professional DevOps Engineer Q61
  62. Google Cloud Professional DevOps Engineer Q62
  63. Google Cloud Professional DevOps Engineer Q63
  64. Google Cloud Professional DevOps Engineer Q64
  65. Google Cloud Professional DevOps Engineer Q65
  66. Google Cloud Professional DevOps Engineer Q66
  67. Google Cloud Professional DevOps Engineer Q67
  68. Google Cloud Professional DevOps Engineer Q68
  69. Google Cloud Professional DevOps Engineer Q69
  70. Google Cloud Professional DevOps Engineer Q70
  71. Google Cloud Professional DevOps Engineer Q71
  72. Google Cloud Professional DevOps Engineer Q72
  73. Google Cloud Professional DevOps Engineer Q73
  74. Google Cloud Professional DevOps Engineer Q74
  75. Google Cloud Professional DevOps Engineer Q75
  76. Google Cloud Professional DevOps Engineer Q76
  77. Google Cloud Professional DevOps Engineer Q77
  78. Google Cloud Professional DevOps Engineer Q78
  79. Google Cloud Professional DevOps Engineer Q79
  80. Google Cloud Professional DevOps Engineer Q80
  81. Google Cloud Professional DevOps Engineer Q81
  82. Google Cloud Professional DevOps Engineer Q82
  83. Google Cloud Professional DevOps Engineer Q83
  84. Google Cloud Professional DevOps Engineer Q84
  85. Google Cloud Professional DevOps Engineer Q85
  86. Google Cloud Professional DevOps Engineer Q86
  87. Google Cloud Professional DevOps Engineer Q87
  88. Google Cloud Professional DevOps Engineer Q88
  89. Google Cloud Professional DevOps Engineer Q89
  90. Google Cloud Professional DevOps Engineer Q90
  91. Google Cloud Professional DevOps Engineer Q91
  92. Google Cloud Professional DevOps Engineer Q92
  93. Google Cloud Professional DevOps Engineer Q93
  94. Google Cloud Professional DevOps Engineer Q94
  95. Google Cloud Professional DevOps Engineer Q95
  96. Google Cloud Professional DevOps Engineer Q96
  97. Google Cloud Professional DevOps Engineer Q97
  98. Google Cloud Professional DevOps Engineer Q98
  99. Google Cloud Professional DevOps Engineer Q99
  100. Google Cloud Professional DevOps Engineer Q100
  101. Google Cloud Professional DevOps Engineer Q101
  102. Google Cloud Professional DevOps Engineer Q102
  103. Google Cloud Professional DevOps Engineer Q103
  104. Google Cloud Professional DevOps Engineer Q104
  105. Google Cloud Professional DevOps Engineer Q105
  106. Google Cloud Professional DevOps Engineer Q106
  107. Google Cloud Professional DevOps Engineer Q107
  108. Google Cloud Professional DevOps Engineer Q108
  109. Google Cloud Professional DevOps Engineer Q109
  110. Google Cloud Professional DevOps Engineer Q110
  111. Google Cloud Professional DevOps Engineer Q111
  112. Google Cloud Professional DevOps Engineer Q112
  113. Google Cloud Professional DevOps Engineer Q113
  114. Google Cloud Professional DevOps Engineer Q114
  115. Google Cloud Professional DevOps Engineer Q115
  116. Google Cloud Professional DevOps Engineer Q116
  117. Google Cloud Professional DevOps Engineer Q117
  118. Google Cloud Professional DevOps Engineer Q118
  119. Google Cloud Professional DevOps Engineer Q119
  120. Google Cloud Professional DevOps Engineer Q120

You are creating a CI/CD pipeline to perform Terraform deployments of Google Cloud resources. Your CI/CD tooling is running in Google Kubernetes Engine (GKE) and uses an ephemeral Pod for each pipeline run. You must ensure that the pipelines that run in the Pods have the appropriate Identity and Access Management (IAM) permissions to perform the Terraform deployments. You want to follow Google-recommended practices for identity management. What should you do? (Choose two.)

A. Create a new Kubernetes service account, and assign the service account to the Pods. Use Workload Identity to authenticate as the Google service account.

B. Create a new JSON service account key for the Google service account, store the key as a Kubernetes secret, inject the key into the Pods, and set the GOOGLE_APPLICATION_CREDENTIALS environment variable.

C. Create a new Google service account, and assign the appropriate IAM permissions.

D. Create a new JSON service account key for the Google service account, store the key in the secret management store for the CI/CD tool, and configure Terraform to use this key for authentication.

E. Assign the appropriate IAM permissions to the Google service account associated with the Compute Engine VM instances that run the Pods.

Disclaimer

This is a practice question. There is no guarantee of coming this question in the certification exam.

Answer

A, C

Explanation

A. Create a new Kubernetes service account, and assign the service account to the Pods. Use Workload Identity to authenticate as the Google service account.
(Suggests creating a new Kubernetes service account and assigning it to the Pods. This service account is then associated with a Google service account using Workload Identity. This setup enables seamless authentication of Pods as the specified Google service account without relying on manual management of service account keys.)

B. Create a new JSON service account key for the Google service account, store the key as a Kubernetes secret, inject the key into the Pods, and set the GOOGLE_APPLICATION_CREDENTIALS environment variable.

C. Create a new Google service account, and assign the appropriate IAM permissions.
(Complements the approach by emphasizing the creation of a new Google service account and assigning the necessary IAM permissions. While the Kubernetes service account establishes the identity within the GKE cluster, the Google service account is associated with the underlying Google Cloud resources, ensuring that the appropriate permissions are granted for Terraform deployments.)

D. Create a new JSON service account key for the Google service account, store the key in the secret management store for the CI/CD tool, and configure Terraform to use this key for authentication.

E. Assign the appropriate IAM permissions to the Google service account associated with the Compute Engine VM instances that run the Pods.