A company needs to ensure that all IAM roles are granted with minimal privilege. What is the best approach?
AUse predefined roles for everything.
BUse service accounts as roles.
CUtilize IAM permissions monitoring.
DCreate custom roles with required permissions.
Explanation
Creating custom roles tailored to specific needs ensures minimal privilege, unlike predefined roles that may grant excess permissions.
Q102
What happens when you set an object in Google Cloud Storage to nearline storage class?
AData is instantly available for immediate retrieval.
BData is charged at the standard rate.
CData is stored for long-term archiving.
DData is typically accessed less than once a month.
Explanation
Nearline storage is optimized for infrequent access, specifically for data accessed less than once a month, unlike other classes.
Q103
Which service is used for managing access to GCP resources?
AIdentity and Access Management (IAM)
BCloud Storage
CApp Engine
DCloud Functions
Explanation
IAM manages access controls, while other options do not.
Q104
A company needs to process real-time data streams. Which GCP service is most suitable?
ABigQuery
BDataflow
CCompute Engine
DCloud Storage
Explanation
Dataflow is designed for real-time stream processing, while others are not.
Q105
You are configuring a firewall rule. What happens when the rule is set to deny all?
ABlocks all incoming traffic
BAllows all outgoing traffic
CBlocks both incoming and outgoing traffic
DOnly blocks traffic from certain IPs
Explanation
Denying all blocks both incoming and outgoing traffic completely.
Q106
Which service provides serverless event-driven computing?
ACloud Functions
BCompute Engine
CApp Engine
DCloud Storage
Explanation
Cloud Functions is designed for serverless, event-driven applications, while the others are not.
Q107
A company needs to ensure data redundancy across multiple regions. Which storage option should they choose?
ARegional Storage
BMulti-Regional Storage
CColdline Storage
DArchive Storage
Explanation
Multi-Regional Storage provides high availability and data redundancy across multiple locations.
Q108
What happens when a Compute Engine instance is stopped?
ABilling continues for the instance
BData on the persistent disk is deleted
CEphemeral IP is released
DRunning applications are paused
Explanation
Stopping an instance releases ephemeral IPs, while persistent disk data remains intact.
Q109
Which Google Cloud service is best for real-time data streaming?
ACloud Pub/Sub
BCloud Storage
CCloud Functions
DCloud SQL
Explanation
Cloud Pub/Sub is designed for real-time messaging, while the others serve different purposes like storage or database management.
Q110
You are configuring access for a new cloud project. Which IAM role provides basic project permissions?
AProject Viewer
BProject Editor
CProject Owner
DBilling Account User
Explanation
Project Editor includes permissions for modifying resources, while Viewer lacks edit capabilities and Owner grants unnecessary permissions.