Google Cloud

Google Cloud Certified – Cloud Digital Leader

PR000225
Popular Trending

Get certified as a Cloud Digital Leader with exam code PR000225 to validate your skills in Google Cloud.

489 questions 0 views Free
Start Mock Test Timed · Full-length · Scored

Questions 21–30 of 489

Q21

You are configuring IAM roles for a project. What happens if a user has conflicting permissions across two roles?

  • A More restrictive permissions apply
  • B Permissions will be ignored
  • C Permissions are summed up
  • D Least restrictive permissions apply
Explanation In IAM, the least restrictive permissions are applied, ensuring users can access the necessary resources.
Q22

Which service allows for real-time data processing in Google Cloud?

  • A Cloud Pub/Sub
  • B Cloud Storage
  • C BigQuery
  • D Cloud Functions
Explanation Cloud Pub/Sub facilitates real-time messaging, unlike the other services that focus on storage or analytics.
Q23

A company needs to ensure only members of a specific group can access a Cloud Storage bucket. What should they use?

  • A IAM Policies
  • B Bucket Lifecycle Management
  • C Cloud Functions
  • D Cloud Firestore
Explanation IAM Policies control access based on roles, unlike the other options which serve different functionalities.
Q24

What happens when a Google Cloud VM instance is stopped?

  • A Disk data is deleted
  • B Instance resumes billing
  • C IP address is retained
  • D Instance state is persistent
Explanation A stopped VM retains its external IP unless it's ephemeral; data on disks remains intact.
Q25

A company needs to store sensitive customer data securely. Which Google Cloud service should they use?

  • A Cloud SQL with encryption
  • B Cloud Pub/Sub
  • C BigQuery
  • D Cloud Functions
Explanation Cloud SQL supports encryption and can manage secure access, unlike the other options which are not designed for sensitive data storage.
Q26

What happens when you delete a Google Cloud Storage bucket with objects inside?

  • A Only bucket is deleted
  • B All objects are retained
  • C All objects are deleted
  • D Objects archived automatically
Explanation Deleting a bucket removes it and all contained objects permanently.
Q27

You are configuring IAM roles for users in a Google Cloud project. What role grants the least privileges?

  • A Owner
  • B Editor
  • C Viewer
  • D Custom Role
Explanation The Viewer role allows read access only, making it the least privileged option compared to others.
Q28

Which service is best for managing relational databases on Google Cloud?

  • A Cloud SQL
  • B Firestore
  • C Bigtable
  • D Cloud Spanner
Explanation Cloud SQL is designed for relational databases, while Firestore is NoSQL and Bigtable is intended for wide-column storage. Cloud Spanner is also a valid choice but has a broader scope for scalable databases.
Q29

A company needs to automate the deployment of a web application. Which service should they use?

  • A Cloud Build
  • B App Engine
  • C Compute Engine
  • D Container Registry
Explanation Cloud Build allows for CI/CD pipelines to automate application deployment, while App Engine is an app hosting service and Compute Engine provides virtual machines, which are not specifically for automation.
Q30

What happens when you set a Public IP address on a Compute Engine instance?

  • A Instance is accessible over the internet
  • B IP will be static by default
  • C Firewall rules are automatically created
  • D Instance loses internal IP address
Explanation A public IP allows external internet access to the instance, while the IP is ephemeral by default unless explicitly set as static, existing firewall rules are not altered, and the internal IP remains operational.