A Cloud Engineer is writing a deployment script to provision a backend database proxy virtual machine named `proxy-prod-01` on Compute Engine in zone `us-central1-a`.
The instance must meet the following strict requirements:
1. Prevent direct exposure to the public internet by omitting an external IP address.
2. Run using a user-managed service account named `[email protected]`.
3. Adhere to Google Cloud security best practices by delegating access control strictly to IAM roles assigned to the service account, rather than restricting access via legacy API access scopes.
4. Ensure the workload runs continuously without risk of sudden 30-second termination notices caused by host resource reclaim events.
Which `gcloud compute instances create` command correctly configures the instance according to these requirements?
- gcloud compute instances create proxy-prod-01 \
--zone=us-central1-a \
--no-address \
--service-account=app-proxy-sa@my-gcp-project.iam.gserviceaccount.com \
--scopes=https://www.googleapis.com/auth/cloud-platformCevap - Bgcloud compute instances create proxy-prod-01 \
--zone=us-central1-a \
--no-address \
--iam-account=app-proxy-sa@my-gcp-project.iam.gserviceaccount.com \
--scopes=https://www.googleapis.com/auth/cloud-platform - Cgcloud compute instances create proxy-prod-01 \
--zone=us-central1-a \
--no-address \
--service-account=app-proxy-sa@my-gcp-project.iam.gserviceaccount.com \
--scopes=https://www.googleapis.com/auth/cloud-platform \
--provisioning-model=SPOT - Dgcloud compute instances create proxy-prod-01 \
--zone=us-central1-a \
--no-address \
--service-account=app-proxy-sa@my-gcp-project.iam.gserviceaccount.com \
--scopes=editor