You are configuring IAM policies for a project. What happens when you set both organization and project-level roles?
AOrganization roles override project roles
BProject roles override organization roles
CBoth roles have no effect
DConflicts cause access denial
Explanation
Project roles take precedence; organization roles do not override them, but coexist with additional permissions at the project level.
Q172
Which service allows for large-scale data analytics on GCP?
ABigQuery
BCloud Storage
CApp Engine
DCloud Functions
Explanation
BigQuery provides a managed solution for data analytics, while the others serve different purposes.
Q173
A company needs a hybrid cloud solution. Which service is best suited?
ACloud Interconnect
BCompute Engine
CCloud SQL
DCloud Storage
Explanation
Cloud Interconnect provides dedicated connections for hybrid setups, whereas the others do not support hybrid architectures.
Q174
What happens when quota limits are exceeded in GCP?
AAll operations halt immediately
BNew resource requests are denied
CExisting resources are deleted
DService level agreements are voided
Explanation
Exceeding quotas results in denial of new requests; existing resources remain unaffected.
Q175
Which Google Cloud service is used for container orchestration?
AGoogle Kubernetes Engine
BCloud Functions
CApp Engine
DCloud Run
Explanation
Google Kubernetes Engine facilitates container orchestration; others are not designed for this purpose.
Q176
A company needs to store confidential data with strict access controls. What should they implement?
ACloud Storage Coldline
BCloud Pub/Sub
CGoogle Cloud IAM
DCloud Firestore
Explanation
Google Cloud IAM provides precise access control, unlike the others which do not manage permissions directly.
Q177
What happens when you configure an instance with only a public IP?
ANo access from the internet.
BAccess only via VPN.
CDirect internet access allowed.
DOnly internal traffic allowed.
Explanation
A public IP allows direct internet access; the other options are incorrect regarding public IP functionality.
Q178
Which Google Cloud service provides a fully managed environment for deploying applications without managing the underlying infrastructure?
ACloud Run
BCompute Engine
CCloud Functions
DKubernetes Engine
Explanation
Cloud Run enables developers to run containers without managing servers, while the others involve more infrastructure management.
Q179
A company needs to store sensitive data securely and control access to that data over time. Which solution should they implement?
ACloud Storage with IAM
BBigQuery
CCloud Pub/Sub
DApp Engine
Explanation
Cloud Storage with IAM allows secure storage and access controls; BigQuery is for analysis, and the other options do not focus on secure data storage.
Q180
What happens when you apply a 'deny' IAM policy to a project in Google Cloud?
AAll access is automatically revoked
BOverrides all 'allow' policies
CDenied users still have audit access
DPolicy applies only for new users
Explanation
'Deny' policies override any 'allow' policies, whereas the other options misrepresent how IAM policies function.