Google Cloud

Google Cloud Certified – Associate Data Practitioner

PR000306

Become a certified Associate Data Practitioner with exam code PR000306 to validate your data skills in Google Cloud.

492 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 71–80 of 492

Q71

A company needs to securely manage API keys for multiple services. What is the best practice?

  • A Embed keys in the application code
  • B Store in Google Cloud Key Management
  • C Use environment variables only
  • D Store in a plaintext file
Explanation Storing keys in Google Cloud Key Management ensures security and proper access control, while the other options expose keys to risks.
Q72

You are configuring IAM policies for a project. What happens if you grant a user both Viewer and Editor roles?

  • A User can only view resources
  • B User loses Viewer access
  • C User retains both permissions
  • D User gains no permissions
Explanation In IAM, a user retains all granted permissions, accumulating access from multiple roles.
Q73

Which Google Cloud service is best for real-time analytics?

  • A BigQuery
  • B Cloud Storage
  • C Cloud Functions
  • D Cloud Pub/Sub
Explanation BigQuery is optimized for real-time analytics, while the others serve different uses like storage or serverless execution.
Q74

A company needs to process large streams of data in real time while ensuring low latency. Which Google Cloud component should they use?

  • A Cloud Dataflow
  • B Cloud SQL
  • C Cloud Storage
  • D Cloud Run
Explanation Cloud Dataflow is designed for real-time data processing, whereas the other options are primarily for transactional storage or computing tasks.
Q75

You are configuring IAM permissions for a GCP project. What happens if you use a custom role with no permissions?

  • A User inherits project owner permissions.
  • B User cannot perform any actions.
  • C User has default IAM roles applied.
  • D User gains full control over resources.
Explanation A custom role with no permissions effectively denies all access, while the other options misrepresent IAM behavior in GCP.
Q76

Which Google Cloud service can automatically scale to manage variability in workloads?

  • A Google Kubernetes Engine
  • B Compute Engine
  • C Cloud Functions
  • D App Engine
Explanation App Engine automatically scales based on demand, while others require manual setup.
Q77

A company needs to transfer large datasets quickly and securely into Google Cloud. Which option is optimal?

  • A Cloud Storage Transfer Service
  • B Direct upload via console
  • C Google Cloud Console for BigQuery
  • D Migration tools in Dataflow
Explanation Cloud Storage Transfer Service is designed specifically for quick, secure data transfer.
Q78

What happens when you assign a Compute Engine instance to a predefined IAM role?

  • A Instance loses all permissions
  • B Role grants instance predefined permissions
  • C Instance inherits project permissions
  • D None of the above
Explanation Assigning a role grants the instance permissions defined by that role, affecting its access level.
Q79

A company needs to store vast amounts of unstructured data efficiently. Which Google Cloud service is best suited for this?

  • A Cloud Datastore
  • B Cloud Storage
  • C BigQuery
  • D Cloud SQL
Explanation Cloud Storage is optimized for unstructured data; other services cater better to structured or transactional data.
Q80

You are configuring IAM policies for a team. What happens when you assign a role to a user at the organization level?

  • A Role applies only to that project.
  • B Role applies across all resources.
  • C User cannot access any resources.
  • D Role is overridden by project roles.
Explanation Assigning a role at the organization level grants access to all resources unless overridden by more specific roles.