Question 254 of 318
Single answerYou are running code in Google Kubernetes Engine (GKE) containers in Google Cloud that require access to objects stored in a Cloud Storage bucket. You need to securely grant the Pods access to the bucket while minimizing management overhead. What should you do?
✓ACreate a service account. Grant bucket access to the Pods by using Workload Identity Federation for GKE.
BCreate a service account with keys. Store the keys in Secret Manager with a 30-day rotation schedule. Reference the keys in the Pods.
CCreate a service account with keys. Store the keys as a Kubernetes secret. Reference the keys in the Pods.
DCreate a service account with keys. Store the keys in Secret Manager. Reference the keys in the Pods.
✓
Correct Answer: A
Create a service account. Grant bucket access to the Pods by using Workload Identity Federation for GKE.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.