You are configuring IAM roles for a new team. What happens if no roles are assigned?
AUsers have full access
BUsers can view resources only
CNo access is granted
DUsers can deploy applications
Explanation
Without assigned roles, users have no permissions at all, while the other options incorrectly imply some level of access.
Q202
Which Google Cloud service provides serverless event-driven computing?
ACloud Functions
BCompute Engine
CCloud Run
DApp Engine
Explanation
Cloud Functions allows you to run code in response to events without managing servers, while the others require more management or configuration.
Q203
A company needs to store sensitive data and adhere to compliance regulations. Which feature should they enable?
AData Encryption at Rest
BMulti-Region Storage
CObject Lifecycle Management
DStandard Class Storage
Explanation
Data Encryption at Rest protects sensitive data, while the other options do not specifically address compliance needs.
Q204
You are configuring a Google Kubernetes Engine cluster. What happens if you set the node pool to zero replicas?
AClustering is disabled
BNo applications will run
CCluster auto-scaling stops
DResources are deleted
Explanation
Setting the node pool to zero replicas means no Pods can run, while the other options are misleading in their implications about cluster management.
Q205
Which service is best for hosting web applications on GCP?
AApp Engine
BBigQuery
CCloud Functions
DCloud Storage
Explanation
App Engine is specifically designed for web applications, unlike the others which serve different purposes.
Q206
A company needs to ensure their GCP resources are only accessible from within their corporate network. What should they implement?
ACloud Load Balancer
BPrivate Google Access
CVPC Peering
DFirewall Rules
Explanation
Firewall Rules can restrict access based on IP ranges, ensuring only corporate network access to resources.
Q207
What happens when you apply an IAM role with a deny policy in GCP?
AAccess is granted regardless of conditions
BRoles are ignored altogether
CSpecific actions are blocked
DOnly predefined roles are effective
Explanation
A deny policy specifically blocks access to certain actions, even if roles allow them.
Q208
Which service is best for hosting microservices in GCP?
AGoogle Kubernetes Engine
BGoogle Cloud Run
CGoogle App Engine
DCloud Functions
Explanation
Cloud Run is specifically designed for deploying and managing containerized microservices, unlike others.
Q209
A company needs to perform data analysis on real-time streaming datasets. Which GCP service should they use?
AGoogle BigQuery
BGoogle Dataflow
CGoogle Dataproc
DGoogle Cloud Pub/Sub
Explanation
Dataflow is optimized for processing and analyzing real-time streaming data.
Q210
You are configuring IAM policies. What happens when a user has both a role that allows and one that denies access to a resource?
AAccess is granted.
BAccess is denied.
CAccess depends on context.
DAccess is based on role precedence.
Explanation
In GCP, explicit deny overrides allow, so access is denied.