Mountkirk Games wants you to secure the connectivity from the new gaming application platform to Google Cloud. You want to streamline the process and follow Google-recommended practices. What should you do?
Choose an answer
Tap an option to check your answer.
Correct answer: Configure Workload Identity and service accounts to be used by the application platform..
Why this is the answer
Workload Identity is the Google-recommended way for applications running in Google Kubernetes Engine (GKE) to access Google Cloud services securely. It allows Kubernetes service accounts to act as Google service accounts, enabling fine-grained access control without managing credentials directly. This streamlines the process and aligns with Google's best practices for secure application-to-cloud connectivity. Using Kubernetes Secrets directly (even with Application-Layer Secrets Encryption and Cloud KMS) is less ideal because it still involves managing secrets within Kubernetes, which Workload Identity aims to abstract away for Google Cloud services. While HashiCorp Vault is a valid secret management solution, Workload Identity is Google's native and integrated approach for GKE workloads accessing Google Cloud, making it the more streamlined and recommended option in this scenario.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed