You manage service accounts in project proj-sa and need a service account from proj-sa to take snapshots of VMs in proj-vm. What should you do?
Choose an answer
Tap an option to check your answer.
Correct answer: Grant the service account the Compute Storage Admin IAM role in project proj-vm..
Why this is the answer
To allow a service account from proj-sa to take snapshots of VMs in proj-vm, you must grant it the necessary permissions in proj-vm. The Compute Storage Admin role provides the permissions required to manage Compute Engine disk snapshots. Downloading the service account private key and adding it to VM metadata or SSH keys is an insecure and incorrect method for granting permissions to a service account for API operations. Setting the VM's service account API scope only affects the permissions of the VM's own service account, not a separate service account from another project.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed