You are configuring access to a Google Cloud project with multiple IAM roles assigned. What happens when a user has two roles with conflicting permissions?
ADenial of access to all resources
BAccess to some resources only
CCombined permissions are granted
DMost restrictive permission applies
Explanation
Google Cloud IAM combines permissions across roles, granting all that the user has.
Q352
Which service provides managed machine learning models?
AGoogle BigQuery
BGoogle Cloud AutoML
CGoogle Compute Engine
DGoogle App Engine
Explanation
Google Cloud AutoML allows users to build and deploy machine learning models easily, while the others do not specifically focus on managed ML models.
Q353
A company needs to analyze large datasets in real-time. Which service is best suited for this requirement?
AGoogle Cloud Storage
BGoogle Dataflow
CGoogle Cloud Functions
DGoogle Pub/Sub
Explanation
Google Dataflow is designed for real-time data stream processing, making it ideal for analyzing large datasets in real-time, unlike others which serve different purposes.
Q354
You are configuring IAM roles for a project and need a user to view resources without modifying them. Which role should you assign?
AEditor
BViewer
COwner
DCustom Role
Explanation
The Viewer role allows users to view resources without making changes, while others grant different levels of permissions beyond viewing.
Q355
Which Google Cloud service provides serverless execution for event-driven code?
ACloud Functions
BCompute Engine
CApp Engine
DCloud Run
Explanation
Cloud Functions is built for serverless execution triggered by events; other options require provisioning or managing servers.
Q356
A company needs to optimize costs by deleting unwanted disks in Compute Engine. What should they consider first?
ARecurring charges for VMs
BDisk snapshots and backups
CReserved instances of VMs
DAvailable inventory of VMs
Explanation
They should ensure that disk snapshots or backups are not needed before deletion, as this could cause data loss.
Q357
What happens when you set up IAM roles with overly permissive access on a project?
AIncreases accountability
BEnhances resource sharing
CReduces security risks
DMay expose resources to misuse
Explanation
Overly permissive IAM roles can lead to misuse or unauthorized access, compromising security.
Q358
Which service allows orchestration of cloud resources?
AGoogle Cloud Deploy
BGoogle Cloud Functions
CGoogle Cloud Composer
DGoogle Cloud Storage
Explanation
Google Cloud Composer orchestrates resources using Apache Airflow; others focus on deployment or storage.
Q359
A company needs to analyze large volumes of streaming data in real time. Which service should they use?
AGoogle Cloud Storage
BGoogle BigQuery
CGoogle Dataflow
DGoogle Cloud Pub/Sub
Explanation
Google Dataflow processes streaming data in real time; others either store or query data, but not process streaming.
Q360
What happens when you create a VPC network in Google Cloud?
AA subnet is created automatically.
BResources are publicly accessible.
CA firewall is disabled by default.
DIt incurs no cost immediately.
Explanation
Creating a VPC network auto-creates a default subnet; others state incorrect implications regarding accessibility, security, and pricing.