Question 24

Question

You are adding steps to a working automation that uses a service account to authenticate. You need
to drive the automation the ability to retrieve files from a Cloud Storage bucket. Your organization
requires using the least privilege possible.
What should you do?

Accepted Answer

Grant the read-only privilege to the service account for the Cloud Storage bucket.

Mia · Answer

You'd want C here, assuming all you need is to pull files. If that automation ever has to upload or manage objects, though, the role changes fast.

CuriousAuditor7635 · Answer

GCP IAM is so granular it sometimes drives me nuts. Pretty sure C is what they want here since read-only on the bucket keeps to least privilege for just grabbing files. Granting anything broader like D is overkill and not best practice even if it works.

ChloeV · Answer

Option C but only if it's just file retrieval. If you needed write or admin, permission would change. Anyone see this tripped up by object ACLs?

Google Professional Cloud Network Engineer Real Exam Questions [October 2026 Update] Quiz

You are adding steps to a working automation that uses a service account to authenticate. You need to drive the automation the ability to retrieve files from a Cloud Storage bucket. Your organization requires using the least privilege possible. What should you do?

Premium Access Includes