You are configuring CI/CD using Google Cloud Build. What does it produce upon a successful execution?
AArtifact results
BExecution report
CDeployment logs
DStatus notifications
Explanation
Cloud Build primarily generates artifacts as output, not just logs or status updates alone.
Q382
Which GCP service is used for serverless computing?
ACloud Functions
BCompute Engine
CCloud Storage
DApp Engine
Explanation
Cloud Functions enables event-driven, serverless computing, unlike the other options which require more management or aren't serverless.
Q383
A company needs to analyze a large dataset in real-time. Which GCP product would you recommend?
AGoogle BigQuery
BCloud Spanner
CPub/Sub
DCloud SQL
Explanation
BigQuery is optimized for large-scale analytics in real-time; others are not designed specifically for large dataset analytics.
Q384
What happens when you set a service account key to expire?
ANo effect, continues to work
BService account becomes inactive
CTemporary logout, requires re-authentication
DAccess is revoked after expiration
Explanation
When a service account key expires, all access tokens issued by it will be revoked, while other options misinterpret the expiration implications.
Q385
Which service allows management of Kubernetes clusters in GCP?
AGoogle Kubernetes Engine
BCloud Functions
CCloud Run
DApp Engine
Explanation
Google Kubernetes Engine is specifically designed for Kubernetes management, while others serve different functions.
Q386
A company needs a messaging service that supports asynchronous communication between microservices. Which Google Cloud service should they use?
APub/Sub
BCloud SQL
CFirestore
DCloud Storage
Explanation
Pub/Sub is built for asynchronous messaging, unlike the other storage and database options.
Q387
What happens when you set a Cloud IAM policy with an explicit 'deny' for a resource?
AAccess is allowed by default
BAccess is explicitly denied
CAccess depends on resource type
DAccess is granted if user has roles
Explanation
An explicit deny will override any allows, depriving access unequivocally.
Q388
Which service is best for deploying microservices on Google Cloud?
AGoogle Kubernetes Engine
BCloud Functions
CApp Engine
DCloud Run
Explanation
Google Kubernetes Engine is optimized for managing containers, making it best for microservices.
Q389
A company needs to provide users access to a shared file stored on Cloud Storage. What is the best method for granting access?
AUse a service account
BGenerate a signed URL
CSet public access on the bucket
DShare IAM roles with users
Explanation
Generating a signed URL allows temporary access without exposing the entire bucket.
Q390
You are configuring IAM policies for a project. If a user has conflicting permissions from different roles, what will happen?
AThe most permissive role wins
BAccess is denied entirely
CPermissions are cumulative
DOnly organization-level permissions apply
Explanation
IAM policies are additive, meaning more permissions take precedence over restrictions.