Google Cloud

Google Cloud Certified – Associate Data Practitioner

PR000306

Become a certified Associate Data Practitioner with exam code PR000306 to validate your data skills in Google Cloud.

492 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 161–170 of 492

Q161

A company needs to analyze real-time streaming data. Which Google Cloud service should they choose?

  • A BigQuery
  • B Dataflow
  • C Cloud Storage
  • D Cloud Pub/Sub
Explanation Dataflow is optimized for processing stream data in real-time, unlike the others which serve different purposes.
Q162

What happens when a user is granted the role 'Viewer' in Google Cloud IAM?

  • A User can modify resources
  • B User can only view resources
  • C User can create resources
  • D User can delete resources
Explanation The 'Viewer' role allows only read access, while others allow resource modification or creation.
Q163

Which service enables deploying managed Kafka clusters?

  • A Cloud Pub/Sub
  • B Cloud Dataflow
  • C Cloud Composer
  • D Cloud Pub/Sub for Kafka
Explanation Cloud Pub/Sub for Kafka provides managed Kafka services, while others serve different purposes.
Q164

A company needs to store large unstructured data like images. Which solution is best?

  • A Cloud SQL
  • B Cloud Storage
  • C BigQuery
  • D Cloud Spanner
Explanation Cloud Storage is designed for unstructured data, unlike others which are structured or relational databases.
Q165

You are configuring IAM roles for a project. What happens when you grant a user permissions but also deny them in a policy?

  • A Deny takes precedence over allow
  • B Allow takes precedence over deny
  • C Permissions are ignored
  • D User can access resources
Explanation In IAM, any explicit denial takes precedence over granted permissions, blocking access despite allow grants.
Q166

A company needs to securely manage API keys. Which Google Cloud service should they use?

  • A Secret Manager
  • B Cloud Functions
  • C Cloud Pub/Sub
  • D Cloud Storage
Explanation Secret Manager is designed for securely managing sensitive information like API keys, while the other services do not provide this functionality.
Q167

What happens when you delete a Google Cloud Storage bucket that contains objects?

  • A Objects are archived.
  • B Objects are also deleted.
  • C Objects remain in Trash.
  • D Bucket becomes read-only.
Explanation Deleting a bucket removes all contained objects permanently, not archiving or retaining them.
Q168

You are configuring IAM roles on a project. Which is a key principle for best practices?

  • A Use least privilege access.
  • B Grant all permissions first.
  • C Use one role for everything.
  • D Assign roles to resource groups.
Explanation The principle of least privilege ensures users have only the access they need, unlike the other options which can increase security risks.
Q169

Which service is optimal for real-time data processing?

  • A Cloud Pub/Sub
  • B BigQuery
  • C Cloud Storage
  • D Cloud Functions
Explanation Cloud Pub/Sub is designed for real-time messaging and data streaming, while other options focus on storage or batch processing.
Q170

A company needs to securely manage user permissions across multiple Google Cloud projects. Which IAM feature should they use?

  • A Service Accounts
  • B Custom Roles
  • C Organization Policies
  • D IAM Conditions
Explanation Custom Roles allow for granular control over permissions tailored to specific project needs, while other options do not address multi-project scenarios as efficiently.