Google Cloud
Google Cloud Certified – Professional Cloud Architect
PR000213
Popular Trending
Get certified as a Professional Cloud Architect with exam code PR000213 to validate your architectural skills in Google Cloud.
498 questions
0 views
Free
Questions 41–50 of 498
A company needs to set up access control for its Google Cloud resources. What should they use?
-
A
Service Accounts
-
B
Public IPs
-
C
Bucket Policies
-
D
Virtual Private Cloud
Explanation
Service Accounts are specifically designed for managing resource access; others do not control resource permissions directly.
What happens when you enable VPC Service Controls on a Google Cloud project?
-
A
It restricts access to specific APIs.
-
B
It enhances logging and monitoring.
-
C
It isolates resources within secure boundaries.
-
D
It impacts billing of virtual machines.
Explanation
VPC Service Controls create security perimeters around resources; others describe unrelated features.
Which Google Cloud service provides managed Kubernetes clusters?
-
A
Cloud Functions
-
B
Google Kubernetes Engine
-
C
Cloud Run
-
D
App Engine
Explanation
Google Kubernetes Engine specifically manages Kubernetes clusters; the others serve different functions.
A company needs to store large volumes of data with frequent access. Which Google Cloud storage option is most cost-effective?
-
A
Cloud Storage Nearline
-
B
Cloud SQL
-
C
Cloud Storage Standard
-
D
Cloud Storage Coldline
Explanation
Cloud Storage Standard is optimal for frequently accessed data, while others are for infrequent or archive storage.
You are configuring IAM policies for a project. What happens if a user has conflicting roles assigned at project and folder levels?
-
A
Folder-level roles take precedence.
-
B
Project-level roles take precedence.
-
C
Roles are combined into one.
-
D
Access is denied altogether.
Explanation
In IAM, more restrictive permissions appear at the folder level and take precedence over project-level roles.
Which service is best for real-time data processing?
-
A
Cloud Dataflow
-
B
Cloud Storage
-
C
Cloud Functions
-
D
Cloud SQL
Explanation
Cloud Dataflow is designed for real-time data processing, while others focus on storage or functions.
A company needs to deploy applications without managing servers. Which service should they use?
-
A
Google Kubernetes Engine
-
B
App Engine
-
C
Compute Engine
-
D
Cloud Run
Explanation
App Engine is a fully managed platform, while others involve more server management.
What happens when a Cloud Storage bucket is set to 'public'?
-
A
Files become editable by everyone
-
B
Files are readable by everyone
-
C
Bucket can be deleted by anyone
-
D
Only the owner can access files
Explanation
Public buckets allow read access, but not editing or deletion by everyone.
Which service is best for serverless event-driven applications?
-
A
Cloud Functions
-
B
Compute Engine
-
C
Cloud Run
-
D
Kubernetes Engine
Explanation
Cloud Functions is specifically designed for serverless event-driven applications; the others require more management.
A company needs to perform batch processing on large datasets. Which service is most suitable?
-
A
BigQuery
-
B
Dataflow
-
C
Cloud Storage
-
D
Cloud Pub/Sub
Explanation
Dataflow is the right choice for batch processing; BigQuery is for analytics, while the others do not handle batch processing directly.