Google Cloud

Google Cloud Certified – Associate Cloud Engineer

PR000260
Popular Trending

Validate your skills as an Associate Cloud Engineer with exam code PR000260 in Google Cloud.

498 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 81–90 of 498

Q81

You are configuring IAM policies for a project. What happens if you set 'Deny' for a role?

  • A Access is completely denied
  • B Access is granted
  • C Access depends on project level settings
  • D Only read access is allowed
Explanation Setting 'Deny' completely prevents access, while the other options are incorrect interpretations of IAM policies.
Q82

Which service provides a managed Kubernetes environment in Google Cloud?

  • A Google Kubernetes Engine
  • B App Engine
  • C Compute Engine
  • D Cloud Functions
Explanation Google Kubernetes Engine is specifically designed for Kubernetes management, while others serve different purposes.
Q83

A company needs to restrict access to sensitive data based on user roles in GCP. What should they use?

  • A VPC Service Controls
  • B Cloud IAM
  • C Cloud KMS
  • D BigQuery Data Locks
Explanation Cloud IAM enables defining roles and permissions based on user identity.
Q84

What happens when you disable a Google Cloud project?

  • A All resources are deleted immediately.
  • B Billing charges stop for the project.
  • C The project becomes inaccessible.
  • D Data is permanently lost.
Explanation Disabling a project makes resources inaccessible, but does not delete them immediately.
Q85

Which service should you use for data analytics on streaming data?

  • A Cloud Pub/Sub
  • B Cloud Spanner
  • C BigQuery
  • D Cloud Functions
Explanation Cloud Pub/Sub is designed for real-time messaging; others focus on storage or execution.
Q86

A company needs to architect a solution that automatically scales based on user traffic. Which Google Cloud service should they consider?

  • A Compute Engine
  • B Kubernetes Engine
  • C Cloud Storage
  • D Cloud SQL
Explanation Kubernetes Engine supports automatic scaling; the others do not manage scalability dynamically.
Q87

You are configuring IAM permissions for a project. What happens if you grant a user 'roles/viewer' at the folder level but 'roles/editor' at the project level?

  • A User has no permissions
  • B User can only view resources
  • C User can edit resources
  • D User has conflicting permissions
Explanation IAM roles are additive; project-level editor permissions override folder-level viewer permissions.
Q88

Which service is used for serverless compute?

  • A Google Compute Engine
  • B Google Kubernetes Engine
  • C Google App Engine
  • D Google Cloud Functions
Explanation Google Cloud Functions enables serverless execution, unlike the other options which require infrastructure management.
Q89

A company needs to restrict access to its GCP project to only specific IP addresses. What should they use?

  • A IAM Roles
  • B VPC Service Controls
  • C Firewall Rules
  • D Custom Cloud Functions
Explanation Firewall Rules allow IP-based access management, while other options do not address IP restrictions specifically.
Q90

You are configuring a Cloud Storage bucket for public access. What is a consequence of making a bucket publicly accessible?

  • A Only specific files can be accessed
  • B All files become read-only
  • C Anyone can delete files
  • D Any user can read files
Explanation Public access allows any user to read files, while the other options misrepresent capabilities or permissions.