Google Cloud

Google Cloud Certified – Associate Cloud Engineer

PR000260
Popular Trending

Validate your skills as an Associate Cloud Engineer with exam code PR000260 in Google Cloud.

498 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 321–330 of 498

Q321

What happens when you grant 'roles/viewer' instead of 'roles/editor' in IAM?

  • A User can only read resources
  • B User can delete resources
  • C User can create resources
  • D User can modify IAM roles
Explanation 'roles/viewer' permits read-only access, while 'roles/editor' allows modifications and deletions.
Q322

Which service allows encryption of data at rest in Google Cloud Storage?

  • A Google Cloud KMS
  • B Google Cloud Firestore
  • C Google BigQuery
  • D Google Compute Engine
Explanation Google Cloud KMS provides encryption for data at rest, unlike the other services listed that serve different purposes.
Q323

A company needs to automate the deployment of applications across multiple environments. Which Google Cloud service should they use?

  • A Google Cloud Functions
  • B Google Cloud Build
  • C Google App Engine
  • D Google Cloud Run
Explanation Google Cloud Build is designed for automating application deployments, while the other options are geared towards specific workloads or hosting applications.
Q324

What happens when you delete a Google Cloud Pub/Sub topic?

  • A All subscriptions are deleted too
  • B Subscriptions remain intact
  • C Downstream services immediately stop
  • D Messages are retained temporarily
Explanation Deleting a Pub/Sub topic also deletes all its subscriptions, which is crucial for managing message flows.
Q325

Which service should you use for real-time event processing?

  • A Cloud Pub/Sub
  • B Cloud Storage
  • C Cloud Functions
  • D Cloud SQL
Explanation Cloud Pub/Sub is designed for real-time messaging, while the others serve different purposes.
Q326

A company needs to grant temporary access to a contractor to view specific resources. What is the best approach?

  • A Use IAM roles with a time limit
  • B Create a service account for them
  • C Add them as a project owner
  • D Share credentials of a permanent account
Explanation Using IAM roles with time limits allows controlled and temporary access, while the others do not ensure security.
Q327

You are configuring a load balancer. What happens when you set an unhealthy threshold of three?

  • A Instance traffic is immediately cut off
  • B Instances are deemed healthy after three checks
  • C Three consecutive health check failures required
  • D Alerts sent after three failures
Explanation An unhealthy threshold of three means three consecutive health check failures are needed to mark an instance as unhealthy.
Q328

Which service provides a fully managed NoSQL database?

  • A Cloud Firestore
  • B Cloud Spanner
  • C Cloud SQL
  • D BigQuery
Explanation Cloud Firestore is a fully managed NoSQL database, while the others focus on SQL or data warehousing.
Q329

A company needs to run a machine learning model that continually improves its predictions based on new data. Which Google Cloud service should they use?

  • A Cloud Functions
  • B AI Platform
  • C BigQuery ML
  • D Cloud Run
Explanation AI Platform is designed for deploying and managing machine learning models, while the others do not focus on machine learning models specifically.
Q330

What happens when you assign a role to a Google Cloud resource?

  • A Access is granted immediately
  • B Permissions apply only to sub-resources
  • C Roles override organization policies
  • D Access is inherited from parent resources
Explanation Access is inherited from parent resources, while other options contain incorrect assumptions about roles and permissions.