Scenario: To improve security, an architect wants to ensure that all VMs in a production VPC must use a specific Service Account and that 'default' service accounts are never used. How can this be enforced?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Organization Policy with 'Disable Service Account Creation' and 'Disable Default Service Account Usage' (Constraint)

Organization Policy constraints can be used to disable the automatic creation and usage of default service accounts, forcing developers to use custom service accounts....

๐Ÿ“‹Part of Professional Cloud Architect ยท GCP Certification Practice
Real Exam ScenarioCloud IAM

Scenario: To improve security, an architect wants to ensure that all VMs in a production VPC must use a specific Service Account and that 'default' service accounts are never used. How can this be enforced?

โœ“ Correct Answer & ExplanationCloud IAM

Correct Answer

Organization Policy with 'Disable Service Account Creation' and 'Disable Default Service Account Usage' (Constraint)

Why This Answer Is Correct

Organization Policy constraints can be used to disable the automatic creation and usage of default service accounts, forcing developers to use custom service accounts.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Cloud IAM โ€” a core concept tested in Professional Cloud Architect. Understanding Cloud IAM is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.