Google Cloud
Google Cloud Certified – Associate Cloud Engineer
PR000260
Popular Trending
Validate your skills as an Associate Cloud Engineer with exam code PR000260 in Google Cloud.
498 questions
0 views
Free
Questions 411–420 of 498
What happens when you try to remove a firewall rule that is currently being used?
-
A
Rule stays active
-
B
Operation fails immediately
-
C
Rule is deleted after a delay
-
D
Fail to apply new rules
Explanation
Removing an active firewall rule fails immediately to prevent service disruption; other options are incorrect contexts.
Which Google Cloud service is best for managed Kubernetes deployments?
-
A
Google Kubernetes Engine
-
B
Cloud Functions
-
C
App Engine
-
D
Cloud Run
Explanation
Google Kubernetes Engine provides a managed environment for deploying Kubernetes applications, while others focus on different use cases.
A company needs to analyze streaming data from IoT devices in real-time. Which service should they use?
-
A
BigQuery
-
B
Cloud Pub/Sub
-
C
Cloud Datastore
-
D
Cloud Storage
Explanation
Cloud Pub/Sub is designed for real-time messaging and streaming data, while the others are not optimal for this purpose.
What happens when you apply IAM roles at both project and folder levels?
-
A
Roles are additive at both levels
-
B
Project roles override folder roles
-
C
Folder roles override project roles
-
D
Only higher-level roles apply
Explanation
IAM roles are cumulative, so roles from both levels apply, combining permissions as needed.
Which service allows you to automate server management?
-
A
Google Kubernetes Engine
-
B
Cloud Pub/Sub
-
C
Cloud Functions
-
D
Cloud Storage
Explanation
GKE automates container deployment and management, while others serve different purposes.
A company needs to deploy a web application. What is the best option for automated scaling and management?
-
A
App Engine
-
B
Compute Engine
-
C
Cloud Run
-
D
Cloud Functions
Explanation
App Engine is specifically designed for scaling web applications, unlike other provided options.
What happens when you set a Google Cloud Storage bucket to IAM role 'Storage Object Viewer'?
-
A
User can view bucket metadata
-
B
User can upload files
-
C
User can delete objects
-
D
User can list all bucket objects
Explanation
This role allows listing and viewing objects but not uploading or deleting.
Which service allows scalable serverless microservices?
-
A
Cloud Functions
-
B
Compute Engine
-
C
App Engine
-
D
Cloud Run
Explanation
Cloud Run allows deploying scalable microservices, while the others are more general compute solutions.
A company needs to store sensitive data with strong access control. What should they use?
-
A
Cloud Storage
-
B
Spanner
-
C
Bigtable
-
D
Cloud SQL
Explanation
Cloud SQL provides strong access control features for sensitive data.
You are configuring a firewall rule to allow SSH only from a specific IP. What happens if the rule is misconfigured?
-
A
SSH access denied from all IPs
-
B
SSH access allowed to everyone
-
C
Only specific IPs can access SSH
-
D
No impact on SSH
Explanation
A misconfigured rule could inadvertently allow access to everyone instead of limiting it securely.