JencoMart has decided to migrate user profile storage to Google Cloud Datastore and the application servers to Google Compute Engine (GCE). During the migration, the existing infrastructure will need access to Datastore to upload the data. What service account key-management strategy should you recommend?
A) Provision service account keys for the on-premises infrastructure and for the GCE virtual machines (VMs)
B) Authenticate the on-premises infrastructure with a user account and provision service account keys for the VMs
C) Provision service account keys for the on-premises infrastructure and use Google Cloud Platform (GCP) managed keys for the VMs
D) Deploy a custom authentication service on GCE/Google Kubernetes Engine (GKE) for the on-premises infrastructure and use GCP managed keys for the VMs

Question

Quizplus · Accepted Answer

Provisioning service account keys for the on-premises infrastructure allows it to authenticate with Google Cloud Datastore. Using GCP managed keys for the VMs simplifies key management and enhances security by leveraging Google's built-in key management.

JencoMart Has Decided to Migrate User Profile Storage to Google