ACE Question 69

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose A1

  Why A is correct The scenario is: Application runs on-premises. Application needs to call Google Cloud APIs (e.g., AutoML). A service account already exists with the required permissions. Need to authenticate from outside Google Cloud. Google's recommended approach is to use Application Default Credentials (ADC) with a service account credential file available to the application. In exam terms, the expected answer is: Use service account credentials in your on-premises application. This allows the application to authenticate as the service account and access AutoML using the permissions already granted to that account.

• Chose A3

  Correct answer should be A. "Use service account credentials", so here "credentials" indicate that we will use JSON key file in our on-premises application, and it is a correct way to authenticate from on-premises to APIs. The B option just says how to create this file, and it misses the next step for what to do next to achieve an authentication. In option A and B we will have the same JSON key file, but only option A contains full way to accomplish the task.

• Chose B4

  B As per the documentation: https://cloud.google.com/iam/docs/keys-create-delete#creating