Google Cloud Professional Cloud Security Engineer Practice Exam

What should the permissions for the general service account enable it to do?

1. Access the BigQuery database

2. Execute batch jobs only

3. Manage VM instances

4. Modify IAM roles

The correct answer is: Execute batch jobs only

The appropriate permissions for a general service account should be aligned with the intended use case of the account. For instance, if the service account is primarily designated for executing batch jobs, granting it permissions specifically tied to that function would be essential. This implies that the service account should have the necessary rights to execute scripts or processes that run in a batch mode. In the context of a service account meant for executing batch jobs, it does not necessarily require permissions to interact with other Google Cloud resources like BigQuery, manage VM instances, or modify IAM roles, which are broader in scope and not aligned with the specific task of executing batch jobs. These functions would demand a more specialized set of permissions that go beyond what is needed for simply executing batch jobs. Therefore, focusing on execution rights for batch processes is the appropriate choice for a general service account dedicated to that purpose.