Google Cloud Professional Cloud Database Engineer — Question 51

Your organization is currently updating an existing corporate application that is running in another public cloud to access managed database services in Google Cloud. The application will remain in the other public cloud while the database is migrated to Google Cloud. You want to follow Google-recommended practices for authentication. You need to minimize user disruption during the migration. What should you do?

Answer options

• A. Use workload identity federation to impersonate a service account.
• B. Ask existing users to set their Google password to match their corporate password.
• C. Migrate the application to Google Cloud, and use Identity and Access Management (IAM).
• D. Use Google Workspace Password Sync to replicate passwords into Google Cloud.

Correct answer: A

Explanation

The correct answer is A because using workload identity federation allows the application to authenticate to Google Cloud services without requiring users to change passwords, thus minimizing disruption. Option B is not viable as it involves user password management, which can cause user inconvenience. Option C is incorrect since migrating the application to Google Cloud would not minimize disruption as intended. Option D is not the best practice recommended by Google and may also lead to complications with password management.