What happens when you change the IAM roles for a user who currently has Editor access to Viewer access on a project?
APermissions are temporarily revoked
BUser loses permissions immediately
CUser retains all permissions
DUser gains new permissions
Explanation
Changing IAM roles updates permissions immediately, affecting the user's access rights instantly.
Q22
A company needs to store sensitive user data securely. Which Google Cloud service should they primarily utilize?
AGoogle Cloud Storage
BGoogle BigQuery
CGoogle Cloud SQL
DGoogle Cloud Functions
Explanation
Google Cloud SQL provides encryption features valid for sensitive data, while the others are not specifically built for such use.
Q23
What happens when you set a Google Cloud IAM policy to 'allow' for a role but do not assign that role to any user?
AAccess is granted to all users
BNo users have access to resources
CAccess is granted to specific users
DRole becomes inactive automatically
Explanation
Without assigning the role to users, no access is granted regardless of the established policy.
Q24
You are configuring Google Compute Engine (GCE) instance groups. Which of the following configurations would allow for autoscaling based on CPU utilization?
AStatic instance group
BManaged instance group
CUnmanaged instance group
DVirtual Public Cloud
Explanation
Managed instance groups support autoscaling, while the others do not have this capability.
Q25
Which service is used for object storage in Google Cloud?
ACloud Storage
BBigQuery
CCompute Engine
DCloud Spanner
Explanation
Cloud Storage is designed for object storage; others serve different purposes.
Q26
A company needs to run a web application with unpredictable traffic spikes. Which type of Google Cloud service should they use?
ACloud Functions
BApp Engine
CCompute Engine
DCloud Run
Explanation
App Engine automatically scales based on traffic; others may require more management.
Q27
What happens when you delete a Google Cloud Storage bucket that contains objects?
AAll objects are permanently deleted
BOnly metadata is removed
CObjects are archived automatically
DBucket deletion fails without confirmation
Explanation
Deleting a bucket permanently removes all objects within it; others misrepresent the deletion process.
Q28
Which service is used for deploying and managing containers in Google Cloud?
AGoogle Kubernetes Engine
BApp Engine
CCloud Functions
DCloud Run
Explanation
Google Kubernetes Engine is designed for managing containerized applications, while others focus on different application types or capabilities.
Q29
A company needs to provide temporary access to a Google Cloud Storage bucket for external vendors. What should you use?
ASigned URLs
BService accounts
CAccess Control Lists
DIAM roles
Explanation
Signed URLs allow time-limited temporary access to resources, unlike ACl or IAM roles which do not provide expiration.
Q30
What happens when you set an instance group to manage the VM instances based on CPU utilization?
AAll instances shut down immediately
BInstances scale out on high usage
CInstances are paused
DNo action is taken
Explanation
An instance group will scale out by adding more instances when CPU utilization exceeds specified levels, unlike other options which incorrectly describe the behavior.