Home › GCP Associate Cloud Engineer › cloudcomputing › gcpsetup › Which Google Cloud principal type is meant to au…
Which Google Cloud principal type is meant to authenticate workloads (e.g. a Compute Engine VM calling Cloud Storage) rather than humans?
AA Cloud NAT gateway
BAn Organization policy
CA Folder
DA Service Account
Answer & Solution
Correct answer: D. A Service Account
Service Accounts are non-human identities used by VMs, functions, and workloads to authenticate to Google Cloud APIs. Organization policies are governance rules, folders are hierarchy containers, Cloud NAT is networking — none represent workload identity.
Related questions
An organization wants every project in a specific folder to automatically inherit a policyWhich approach correctly captures Google Cloud's quota model for compute resources?Which IAM role type lets you define the exact list of permissions you want, instead of relA team wants to grant a contractor read-only access to a single Cloud Storage bucket and nCloud Identity vs Google Workspace — which statement is correct?A new application needs to call the BigQuery and Cloud Storage APIs in a project. The APIsWhich mechanism on Google Cloud lets a central admin enforce a rule like "no externally acWhich Google Cloud Identity and Access Management (IAM) concept defines a SET of permissio