Verify Creation Time of Google Cloud Platform Service Account | Exam 'ace: Associate Cloud Engineer' - Google

Verify Google Cloud Platform Service Account Creation Time

Question

You need to verify that a Google Cloud Platform service account was created at a particular time.

What should you do?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

D.

The correct answer is A. Filter the Activity log to view the Configuration category. Filter the Resource type to Service Account.

Explanation:

Google Cloud Platform provides an Activity log that can be used to view and monitor activity in your GCP project. The Activity log provides a record of actions taken on resources in your project, including service accounts.

To verify that a service account was created at a particular time, you should follow these steps:

  1. Go to the Google Cloud Console and select your project.
  2. Click on the hamburger menu in the upper left corner and select "Logging" under the "TOOLS" section.
  3. In the Logging page, you will see a "Query builder" section. Click on "ADD" button to add a new query.
  4. In the "Create a query" page, you need to define the query criteria. For the "Logs" field, select "Cloud Audit Logs".
  5. For the "Resource type" field, select "Service Account".
  6. For the "Log name" field, select "activity".
  7. In the "Filter" field, enter the following filter: protoPayload.methodName="google.iam.admin.v1.CreateServiceAccount"
  8. In the "Time range" field, select the time range for which you want to verify the service account creation.
  9. Click on the "Run Query" button to execute the query.

The query will return a list of all service account creation events that match the specified criteria. You can verify that the service account was created at the particular time by looking at the timestamp of the event. If the event matches the time you are looking for, then you can confirm that the service account was created at that time.