You will create a new Service Account that should be able to list the Compute Engine instances in the project. You want to follow Google-recommended practices. ...

You will create a new Service Account that should be able to list the Compute Engine instances in the project. You want to follow Google-recommended practices.
What should you do?

A. Create an Instance Template, and allow the Service Account Read Only access for the Compute Engine Access Scope. B. Create a custom role with the permission compute.instances.list and grant the Service Account this role. C. Give the Service Account the role of Compute Viewer, and use the new Service Account for all instances. D. Give the Service Account the role of Project Viewer, and use the new Service Account for all instances.