IAM Roles for Service Accounts Quiz

What you'll be asked

1. What is the primary purpose of using a Service Account instead of an individual user account for an application?
2. When configuring a service account for a production application that needs to write logs to a storage bucket, which principle should you follow?
3. Which of the following is considered a security best practice when managing service account keys?
4. You are auditing service accounts and notice an account that hasn't been used in 18 months. What is the recommended remediation action?
5. An application running on a virtual machine needs to access a database. Instead of using service account keys, you decide to use 'Workload Identity' or 'Instance Metadata'. Why is this approach more secure?

Answers and explanations come after you submit.