GCP Associate Cloud Engineer Practice Question

To create a new service account you use gcloud iam service-accounts create. The command requires only the account ID; optional flags like --display-name (and --description) let you set metadata at creation time. Supplying the --project flag ensures the account is created in the intended project. The other commands either try to bind roles (which presumes the account already exists), add a key, or update an existing account-all of which do not create a new service account.