Question 32 of 318
Single answerYou are creating an internal App Engine application that needs to access a user's Google Drive on the user's behalf. Your company does not want to rely on the current user's credentials. It also wants to follow Google-recommended practices.
What should you do?
What should you do?
ACreate a new Service account, and give all application users the role of Service Account User.
BCreate a new Service account, and add all application users to a Google Group. Give this group the role of Service Account User.
CUse a dedicated G Suite Admin account, and authenticate the application's operations with these G Suite credentials.
✓DCreate a new service account, and grant it G Suite domain-wide delegation. Have the application use it to impersonate the user.
✓
Correct Answer: D
Create a new service account, and grant it G Suite domain-wide delegation. Have the application use it to impersonate the user.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of Google certification topics.