What should you do?

You will create a new Service Account that should be able to list the Compute Engine instances in the project. You want to follow Google-recommended practices.

What should you do?
A . Create an Instance Template, and allow the Service Account Read Only access for the Compute Engine Access Scope.
B . Create a custom role with the permission compute.instances.list and grant the Service Account this role.
C . Give the Service Account the role of Compute Viewer, and use the new Service Account for all instances.
D . Give the Service Account the role of Project Viewer, and use the new Service Account for all instances.

View Answer

Answer: B

Explanation:

https://cloud.google.com/compute/docs/access/iam