Professional-Cloud-Architect Exam Dumps | You are the cloud architect for a team developing a new application that integrates with the Gemini API.

<< Prev Question Next Question >>

Question 42/150

You are the cloud architect for a team developing a new application that integrates with the Gemini API. You observe a sudden, massive spike in API costs and usage. An investigation reveals that a developer accidentally committed a service account key with Gemini API access to a public GitHub repository, and a malicious actor is using it. The on-call SRE immediately disabled the key, stopping the unauthorized usage.
Your responsibility is to lead the post-incident review to prevent future credential leaks. What should you do?

A. Initiate a formal disciplinary review for the developer who committed the key. Mandate that all future pull requests must be manually approved by a security team member before being merged.

B. Immediately migrate all applications to use Workload Identity Federation to access Google Cloud APIs from GitHub Actions, eliminating all service account keys from your CI/CD process.

C. Write a report detailing the financial impact of the unauthorized use of the service account key. Work with the finance department to track the costs and create a policy to bill the responsible team for any future cost overruns caused by credential leaks.

D. Schedule a blameless postmortem with the engineering team to map the incident timeline.Collaboratively identify gaps in the development workflow, and assign action items to implement automated pre-commit hooks and a CI/CD pipeline stage for secret scanning.

Question 42/150

LEAVE A REPLY

Download PDF File