You are configuring IAM roles for a Google Cloud project. What is the best practice regarding permissions?
AAssign roles with all permissions
BUse least privilege principle
CGrant full access to all users
DEnable organization-wide permissions
Explanation
The least privilege principle minimizes security risks by only granting necessary permissions, contrary to the other options which increase exposure.
Q292
Which service is best for serverless computing?
ACloud Functions
BCompute Engine
CCloud Run
DCloud Storage
Explanation
Cloud Functions is specifically designed for serverless computing, while the others involve more management and setup.
Q293
A company needs to secure their API data. Which service should they use?
ACloud Load Balancing
BCloud Armor
CSecret Manager
DCloud Identity
Explanation
Cloud Armor protects APIs from attacks, while the other options serve different purposes.
Q294
What happens when you assign multiple IAM roles to a user?
AUser gains all specified permissions
BUser loses all permissions
CUser can only use one role
DUser permissions are disabled
Explanation
Multiple IAM roles grant combined permissions to the user, unlike options B, C, and D which are incorrect regarding IAM behavior.
Q295
Which service can be used for managing containerized applications?
AGoogle Kubernetes Engine
BCloud Storage
CBigQuery
DApp Engine
Explanation
Google Kubernetes Engine is specifically designed for managing containerized applications, unlike the others.
Q296
A company needs to analyze large datasets in real-time. Which Google Cloud service is most appropriate?
ACloud Dataproc
BBigQuery
CCloud Storage
DCloud Pub/Sub
Explanation
BigQuery is optimized for real-time analysis of large datasets, while the other options serve different purposes.
Q297
You are configuring IAM roles and want to grant a specific user permissions only to view resources. Which role should you assign?
AViewer
BEditor
COwner
DCustom Role
Explanation
The Viewer role allows read-only access, whereas Editor and Owner roles grant additional permissions.
Q298
Which service best facilitates serverless computing?
ACloud Functions
BCompute Engine
CApp Engine
DKubernetes Engine
Explanation
Cloud Functions is for event-driven serverless applications while other options require setup and management.
Q299
A company needs to analyze data streams in real-time. Which Google Cloud service should they use?
ACloud Pub/Sub
BBigQuery
CCloud Datastore
DCloud Storage
Explanation
Cloud Pub/Sub provides real-time messaging between services, while the others are not designed for streaming data.
Q300
What happens when you set a GCP Alert Policy to only notify once every hour?
AOnly the first alert is sent
BAll alerts are delayed
COnly critical alerts are notified
DAlerts will build up and notify later
Explanation
Setting a notification frequency limits alerts to one per time window, ignoring additional alerts during that period.