You are configuring IAM roles for a project. What happens if you assign an organization-wide role to a user?
AUser gains project-specific access only
BUser inherits permissions across projects
CUser access is denied completely
DUser can only access public resources
Explanation
An organization-wide role grants permissions across all projects; project-specific roles are limited to one project.
Q202
Which service provides serverless event-driven architecture?
ACloud Functions
BCloud Run
CApp Engine
DCompute Engine
Explanation
Cloud Functions is specifically designed for serverless event-driven architectures, while the others serve different use cases.
Q203
A company needs to distribute its application globally and maintain low latency. What should they use?
ACloud Pub/Sub
BCloud CDN
CCloud Spanner
DBigQuery
Explanation
Cloud CDN caches content at locations closer to users, reducing latency; other options do not primarily address global distribution and caching.
Q204
You are configuring IAM policies for a resource. What happens when two conflicting policies are applied?
AOne overrides the other based on priority
BAccess is denied for all actions
CAccess is granted for all actions
DThe most restrictive policy applies
Explanation
In IAM, conflicting policies resolve based on hierarchy and priority, making the more specific policy take precedence.
Q205
Which service would you use to create serverless APIs?
AGoogle Cloud Functions
BGoogle Compute Engine
CGoogle Kubernetes Engine
DGoogle App Engine
Explanation
Google Cloud Functions enables serverless APIs; Compute Engine requires VM management.
Q206
A company needs to reduce costs associated with inactive data. What should they implement?
AMulti-Region Storage
BNearline Storage
CRegional Storage
DStandard Storage
Explanation
Nearline Storage is designed for infrequent access; Multi-Region incurs higher costs.
Q207
You are configuring IAM roles for a new project. What happens if multiple roles are assigned?
AOnly the highest role is effective
BAll roles are accumulated
CRoles conflict and deny access
DPermissions are randomly applied
Explanation
All assigned roles contribute to permissions; the highest role does not override others.
Q208
Which service enables automatic scaling of instances based on metrics?
ACloud Functions
BCloud Run
CCompute Engine Autoscaler
DApp Engine Standard
Explanation
The Compute Engine Autoscaler automatically adjusts the number of instances based on load metrics, while the others have different scaling characteristics or are for specific types of workloads.
Q209
A company needs to process data streams in real time. Which service should they use?
ABigQuery
BPub/Sub
CCloud Storage
DCloud Functions
Explanation
Pub/Sub is designed specifically for real-time data streaming, unlike the others, which are better suited for batch processing or storage.
Q210
What happens when you set a service account key to 'forced rotation'?
AKey cannot be deleted.
BKey's permissions are locked.
CKey rotates after a specified period.
DKey becomes invalid immediately.
Explanation
When a service account key is set for forced rotation, it will automatically rotate at defined intervals, while the other options describe incorrect behaviors.