Question 251 of 318
Single answerYour organization has applications that run in multiple clouds. The applications require access to a Google Cloud resource running in your project. You must use short-lived access credentials to maintain security across the clouds. What should you do?
ACreate a managed workload identity. Bind an attested identity to the Compute Engine workload.
BCreate a service account key. Download the key to each application that requires access to the Google Cloud resource.
✓CCreate a workload identity pool with a workload identity provider for each external cloud. Set up a service account and add an IAM binding for impersonation.
DCreate a VPC firewall rule for ingress traffic with an allowlist of the IP ranges of the external cloud applications.
✓
Correct Answer: C
Create a workload identity pool with a workload identity provider for each external cloud. Set up a service account and add an IAM binding for impersonation.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.