Google Cloud
Google Cloud Certified – Professional Cloud Architect
PR000213
Popular Trending
Get certified as a Professional Cloud Architect with exam code PR000213 to validate your architectural skills in Google Cloud.
498 questions
0 views
Free
Questions 461–470 of 498
A company needs a global content management system. What Google service is best suited for this?
-
A
Google Cloud Pub/Sub
-
B
Google Cloud Storage
-
C
Google Cloud CDN
-
D
Google Cloud BigQuery
Explanation
Google Cloud CDN improves distribution of web content globally, whereas the others are less focused on content delivery.
You are configuring IAM roles. Which approach ensures least privilege?
-
A
Assigning broad admin roles
-
B
Using predefined roles with minimum permissions
-
C
Assigning roles based on job function
-
D
Inheriting permissions from parent projects
Explanation
Using predefined roles reduces permissions to only what is necessary, unlike broad roles which increase risk.
Which service helps monitor application performance in GCP?
-
A
Cloud Monitoring
-
B
Cloud Functions
-
C
Cloud Storage
-
D
Cloud Firestore
Explanation
Cloud Monitoring provides insights into application performance; the others do not serve this purpose directly.
A company needs to securely share data between multiple GCP projects. What should they use?
-
A
Service Accounts
-
B
Cloud IAM Roles
-
C
Shared VPC
-
D
Cloud Pub/Sub
Explanation
Cloud IAM Roles allow use of resource sharing; the others do not facilitate secure sharing across projects directly.
What happens when you enable VPC flow logs in GCP?
-
A
Logs are sent to Cloud Logging
-
B
Network traffic is blocked
-
C
Flow logs do not capture intra-VPC traffic
-
D
Costs reduce for network usage
Explanation
Enabling VPC flow logs sends logs to Cloud Logging; the other options misrepresent the functionality of flow logs.
A company needs to securely connect its on-premises data center to Google Cloud. Which service should they use?
-
A
Cloud VPN
-
B
Cloud CDN
-
C
Cloud Functions
-
D
App Engine
Explanation
Cloud VPN provides secure connectivity to Google Cloud while other options do not offer this feature.
What happens when you configure a Google Cloud storage bucket with the 'uniform' access control?
-
A
ACLs override the bucket settings
-
B
Uniform access applies to all objects
-
C
Objects inherit access from parents
-
D
Public access is granted automatically
Explanation
Uniform access control applies permissions uniformly to all objects in the bucket, unlike ACLs.
You are configuring IAM for a new project. What is the effect of assigning a 'Viewer' role to a user?
-
A
Can delete resources
-
B
Can view all project data
-
C
Can edit resources
-
D
Can create new services
Explanation
The 'Viewer' role allows users to view project data without making changes.
Which service is best for event-driven architecture?
-
A
Cloud Pub/Sub
-
B
Cloud Run
-
C
Compute Engine
-
D
Cloud SQL
Explanation
Cloud Pub/Sub is designed for event-driven messaging, unlike the other options.
A company needs to analyze real-time streaming data. Which Google Cloud service should they use?
-
A
BigQuery
-
B
Dataflow
-
C
Cloud Storage
-
D
Dataproc
Explanation
Dataflow is tailored for real-time data processing, while the others are not primarily for streaming.