What happens when two services in a project have overlapping IAM roles?
AConflicts occur, denying access.
BRoles are ignored completely.
CMore restrictive access applies.
DAccess is determined by union of roles.
Explanation
IAM roles are combined, allowing access across both roles.
Q412
Which service is best for serverless REST APIs?
ACloud Functions
BGoogle Compute Engine
CCloud Run
DDataflow
Explanation
Cloud Run runs containers in a serverless environment, ideal for REST APIs. Cloud Functions is event-driven, while Compute Engine requires VM management and Dataflow is for data processing.
Q413
A company needs to store large files efficiently. What should they use?
ACloud SQL
BCloud Storage
CApp Engine
DBigtable
Explanation
Cloud Storage is designed for storing and retrieving large amounts of unstructured data. Cloud SQL is for relational databases, App Engine is for applications, and Bigtable is for short data access.
Q414
You are configuring a VPC in Google Cloud. What happens when you assign custom routes?
AOverride default routes
BCreate a new VPC
CDelete existing subnets
DEnable VPN automatically
Explanation
Custom routes take precedence over default routes in a VPC configuration. They do not create a new VPC, delete subnets, or enable VPN.
Q415
Which service automatically scales applications based on demand?
AApp Engine
BCloud Storage
CCloud Pub/Sub
DCloud Functions
Explanation
App Engine scales automatically, while others require manual management.
Q416
A company needs to securely manage API keys for its applications. What is the best practice?
AStore in GitHub
BUse Secret Manager
CEmbed in source code
DUse a public config file
Explanation
Secret Manager provides secure storage, while others expose keys to unauthorized access.
Q417
You are configuring a Firestore database. What happens when a document is deleted?
AIt is permanently lost.
BIt moves to Trash.
CIt is archived for recovery.
DIt triggers a background job.
Explanation
Deleted documents in Firestore cannot be recovered unless previously backed up.
Q418
Which service enables event-driven serverless computing?
ACloud Functions
BApp Engine
CCloud Run
DCompute Engine
Explanation
Cloud Functions is designed for event-driven tasks; others are not primarily event-driven.
Q419
A company needs to securely share project files with external partners. What is the best solution?
APublic storage bucket
BCloud Identity and Access Management
CShared drive in Google Drive
DPrivate Cloud Storage
Explanation
Cloud IAM allows secure access control; others do not ensure proper security for external sharing.
Q420
What happens when a VM instance's disk is deleted in Google Cloud?
AVM automatically restarts
BData is permanently lost
CDisk can be recovered easily
DVM remains operational without disk
Explanation
Deleting a disk results in permanent data loss; the other options do not accurately reflect the consequences.