Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us[email protected]
Menu
Google Discussions
exam questions

Exam Professional Cloud Developer All Questions

View all questions & answers for the Professional Cloud Developer exam
Go to Exam

Exam Professional Cloud Developer topic 1 question 134 discussion

Actual exam question from Google's Professional Cloud Developer
Question #: 134
Topic #: 1
[All Professional Cloud Developer Questions]

You developed a JavaScript web application that needs to access Google Drive's API and obtain permission from users to store files in their Google Drives. You need to select an authorization approach for your application. What should you do?

  • A. Create an API key.
  • B. Create a SAML token.
  • C. Create a service account.
  • D. Create an OAuth Client ID.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by Blueocean at Jan. 22, 2022, 1:39 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
thewalker
4 months ago
Selected Answer: D
The correct answer is D. Create an OAuth Client ID. Here's why: OAuth 2.0 for User Authorization: OAuth 2.0 is the standard protocol for delegated authorization. It allows your web application to request limited access to a user's Google Drive account without requiring their Google account password. OAuth Client ID: To use OAuth 2.0, you need to create an OAuth Client ID in the Google Cloud Console. This ID represents your application and is used to identify it during the authorization process.
upvoted 1 times
thewalker
4 months ago
Why the other options are incorrect: A. API Key: API keys are used for general API access, but they don't provide user-specific authorization. They are not suitable for granting access to a user's Google Drive. B. SAML Token: SAML (Security Assertion Markup Language) is primarily used for single sign-on (SSO) and identity federation. It's not the standard approach for authorizing access to Google Drive. C. Service Account: Service accounts are used to grant access to Google Cloud resources on behalf of your application, not individual users. They are not suitable for user-specific authorization.
upvoted 1 times
...
...
__rajan__
1 year, 2 months ago
Selected Answer: C
OAuth 2.0 is an authorization framework that enables applications to obtain limited access to user accounts on an HTTP service, such as Google Drive. OAuth 2.0 is the preferred authorization approach for JavaScript web applications because it provides a secure and user-friendly way to obtain permission from users to access their Google Drive accounts.
upvoted 1 times
__rajan__
1 year, 2 months ago
Wrongly Selected C It should be D. OAuth 2.0 is an authorization framework that enables applications to obtain limited access to user accounts on an HTTP service, such as Google Drive. OAuth 2.0 is the preferred authorization approach for JavaScript web applications because it provides a secure and user-friendly way to obtain permission from users to access their Google Drive accounts.
upvoted 1 times
...
...
purushi
1 year, 3 months ago
Selected Answer: D
We need to have Oauth 2.1 flow. The client app should have client id and secret key generated from Google drive application. This way the user can login to their google drive account and can perform CRUD operations. The best thing here is, the client app is not aware of the user credentials, and it is very secure. The most common way of getting access token is from authorization code flow with PKCE. PKCE, since it is a JS client app.
upvoted 2 times
...
omermahgoub
1 year, 10 months ago
Selected Answer: D
D. Create an OAuth Client ID. OAuth is an authorization framework that allows third-party applications to access resources on behalf of a user, without having to handle the user's credentials. To use Google Drive's API, your application needs to obtain permission from the user to access their Google Drive, and the best way to do this is through OAuth. You would need to create an OAuth 2.0 client ID and integrate it into your application. This will allow your application to redirect users to the Google OAuth 2.0 server, where they can grant permission to your application to access their Google Drive.
upvoted 1 times
omermahgoub
1 year, 10 months ago
A. Create an API key is not secure enough to give the permission of the user Google drive access B. Create a SAML token: SAML is used for identity and access management, it doesn't give access to user's google drive. C. Create a service account: Service account is used for server to server communication, it doesn't allow for user-level access to their Google Drive.
upvoted 1 times
...
...
zellck
1 year, 11 months ago
Selected Answer: D
D is the answer. https://developers.google.com/drive/api/guides/api-specific-auth
upvoted 1 times
...
tomato123
2 years, 3 months ago
Selected Answer: D
D is correct
upvoted 3 times
...
akshaychavan7
2 years, 3 months ago
Selected Answer: D
Yes! it's D.
upvoted 1 times
...
jitu028
2 years, 7 months ago
Correct answer - D
upvoted 1 times
...
Blueocean
2 years, 10 months ago
Option D https://developers.google.com/drive/api/v3/about-auth
upvoted 4 times
...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel