Crucial Exams

GCP Associate Cloud Engineer Practice Question

An on-premises batch job must upload files to a Cloud Storage bucket every hour. Your security policy forbids distributing long-lived service-account key files, and the development team does not want to build any code that creates or signs JSON Web Tokens (JWTs). Instead, the job will call the IAM Credentials API's generateAccessToken method at runtime to obtain a short-lived credential that the Cloud Storage JSON API will accept directly in the Authorization header. Which type of credential should the job request?

  • Create a service account HMAC key pair for the job to use.

  • Request an OIDC ID token with the Cloud Storage audience.

  • Generate a self-signed JWT signed with the service account's private key.

  • Request an OAuth 2.0 access token for the service account.

GCP Associate Cloud Engineer
Configuring access and security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot