A company needs to secure data at rest using encryption. What should they implement?
AIAM Roles
BVPC Networks
CCustomer-managed encryption keys
DFirestore Security Rules
Explanation
Customer-managed keys ensure data encryption; others do not manage encryption.
Q222
You are configuring Cloud Pub/Sub for message delivery. What happens if a subscriber acknowledges a message too late?
AThe message is permanently deleted
BThe message is re-delivered
CThe message expires immediately
DThe message is queued indefinitely
Explanation
Late acknowledgment triggers re-delivery; others do not reflect Pub/Sub behavior.
Q223
Which service allows you to manage containerized applications?
AGoogle Kubernetes Engine
BCloud Functions
CApp Engine
DCloud Run
Explanation
Google Kubernetes Engine is specifically designed for managing Kubernetes clusters, while others serve different functions.
Q224
A company needs to process data in real time from IoT devices. Which Google Cloud service should they use?
ACloud Storage
BCloud Pub/Sub
CDataflow
DBigQuery
Explanation
Cloud Pub/Sub is ideal for real-time messaging between IoT devices and processing applications.
Q225
You are configuring IAM policies for a project. What happens if a role is granted at both project and organization level?
ARole is ignored at project level
BProject level role takes precedence
COrganization level role takes precedence
DNo roles are assigned
Explanation
In IAM, the more granular role (project level) does not override the broader role (organization level); the organization role applies unless explicitly denied.
Q226
Which service is optimal for real-time data processing?
ACloud Pub/Sub
BCloud Storage
CBigQuery
DCloud Functions
Explanation
Cloud Pub/Sub is designed for real-time messaging, whereas other options serve different purposes.
Q227
A company needs to secure its APIs. Which Google Cloud feature should be used?
AIAM roles
BAPI Gateway
CCloud Functions
DCloud Load Balancing
Explanation
API Gateway allows for secure API management, unlike the other options which do not focus specifically on API security.
Q228
What happens when you set a Compute Engine instance to 'preemptible'?
AGuaranteed availability every time
BCheaper, but can be shutdown
CPermanent instance with no outages
DStandard pricing applies
Explanation
Preemptible instances are cost-effective but can be terminated, with other options incorrectly suggesting guaranteed uptime or pricing.
Q229
Which service provides a fully managed NoSQL database in Google Cloud?
AFirestore
BCloud SQL
CMemoryStore
DBigQuery
Explanation
Firestore is a NoSQL database, while others are either SQL-based or for different use cases.
Q230
A company needs to deploy a microservices architecture in Google Cloud. Which service is ideal for managing this deployment?
ACompute Engine
BCloud Functions
CCloud Run
DApp Engine
Explanation
Cloud Run is designed for containerized microservices, unlike others which are not specifically tailored for this use case.