What happens when you assign a new role to a user that has a permission not included in their existing roles?
APermissions are immediately revoked
BUser receives all permissions
CPermissions depend on role hierarchy
DNo change occurs to permissions
Explanation
The user accumulates the permissions from all assigned roles, enhancing their access rights.
Q202
Which service allows you to deploy containerized applications?
AGoogle Kubernetes Engine
BCloud Functions
CApp Engine
DCloud Run
Explanation
Google Kubernetes Engine manages containerized applications, while other options target different environments.
Q203
A company wants to ensure redundancy for its Cloud Storage. What should they do?
AUse a regional storage class
BImplement IAM policies
CSelect a multi-region storage class
DEnable Cloud Firestore
Explanation
Multi-region storage class provides redundancy across locations; others do not ensure redundancy effectively.
Q204
What happens when a Cloud Scheduler job triggers a Cloud Function?
AThe function runs in a new project
BThe function executes immediately
CThe function may time out
DThe function logs execution results
Explanation
Cloud Functions may time out depending on their execution, while others do not describe functionality post-trigger accurately.
Q205
Which service provides seamless serverless event-driven architecture?
ACloud Functions
BCloud Storage
CCompute Engine
DApp Engine
Explanation
Cloud Functions directly supports event-driven execution, while others serve different purposes.
Q206
A company needs to limit VM access to fewer users; which IAM role should be assigned?
ACompute Viewer
BCompute Instance Admin
CCompute Network Admin
DProject Viewer
Explanation
Compute Instance Admin grants necessary permissions for VM management, unlike the others that restrict access.
Q207
What happens when a Google Cloud Pub/Sub message is not acknowledged?
AIt is deleted immediately
BIt can be retried later
CIt becomes public
DIt triggers an alert
Explanation
Unacknowledged messages are available for retry until acknowledged or the retention period expires, while others are incorrect functionalities.
Q208
Which service is best for serverless computing in Google Cloud?
ACloud Functions
BCompute Engine
CKubernetes Engine
DCloud Run
Explanation
Cloud Functions is specifically designed for serverless execution, unlike the other options.
Q209
A company needs to analyze large datasets without managing servers directly. Which solution should they use?
ABigQuery
BCloud SQL
CDataproc
DCompute Engine
Explanation
BigQuery is a fully-managed data warehouse, while the others require more management effort.
Q210
What happens when you set an IAM policy with 'deny' permission?
APermission is granted
BAccess is fully denied
CAccess is granted only when conditional
DPolicy is ignored
Explanation
A 'deny' permission explicitly denies access, overriding any allow rules.