A company's application is deployed with a user-managed Service Account key. You want to use Google-recommended practices to rotate the key. What should you do?
A) Open Cloud Shell and run gcloud iam service-accounts enable-auto-rotate --iam-account=IAM_ACCOUNT . Open Cloud Shell and run gcloud iam service-accounts enable-auto-rotate --iam-account=IAM_ACCOUNT .
B) Open Cloud Shell and run gcloud iam service-accounts keys rotate --iam-account=IAM_ACCOUNT --key=NEW_KEY . gcloud iam service-accounts keys rotate --iam-account=IAM_ACCOUNT --key=NEW_KEY
C) Create a new key, and use the new key in the application. Delete the old key from the Service Account.
D) Create a new key, and use the new key in the application. Store the old key on the system as a backup key.

Question

Quizplus · Accepted Answer

Creating a new key and updating the application to use it, then deleting the old key, follows Google-recommended practices for key rotation, ensuring security by removing the old key.

A Company's Application Is Deployed with a User-Managed Service Account