You are configuring IAM roles for a project. What happens when a user is assigned multiple roles?
AThey receive the least privileged access
BOnly the first role is applied
CThey inherit permissions cumulatively
DTheir access is denied entirely
Explanation
Multiple IAM roles combine permissions, making option C correct.
Q82
Which service is best for orchestration of containers?
AGoogle Kubernetes Engine
BCloud Functions
CCloud Run
DApp Engine
Explanation
Google Kubernetes Engine is specifically designed for orchestration.
Q83
A company needs to transfer large datasets to Google Cloud. What is the most efficient tool?
ACloud Pub/Sub
BTransfer Appliance
CCloud CDN
DBigQuery Data Transfer Service
Explanation
Transfer Appliance is designed for large data transfers.
Q84
What happens when you set a Cloud Storage bucket's CORS configuration incorrectly?
AFiles become private automatically
BRequests will get blocked
CData is deleted from the bucket
DPerformance improves temporarily
Explanation
Incorrect CORS settings will cause request blocking.
Q85
Which service directly manages container orchestration?
AGoogle Kubernetes Engine
BGoogle Cloud Functions
CApp Engine
DCloud Run
Explanation
Google Kubernetes Engine is built for orchestrating containers, unlike the other services which have different primary functions.
Q86
A company needs to streamline its image processing workflow using Google Cloud. Which architecture should they consider?
ALoad Balanced Compute Instances
BCloud Functions with Pub/Sub
CPersistent Disk Storage
DCloud Run with Cloud Storage
Explanation
Cloud Functions can automate processes triggered by Pub/Sub messages for better workflow, while the other options lack event-driven architecture.
Q87
What happens when you update an existing Cloud Storage bucket's IAM policies?
AOld policies remain effective
BNew policies override old ones
CPolicies are merged automatically
DBucket becomes inaccessible
Explanation
Updated IAM policies replace existing ones, unlike merging or keeping old policies, which doesn't apply.
Q88
Which service is best for serverless compute in Google Cloud?
ACloud Functions
BCloud Run
CCompute Engine
DApp Engine
Explanation
Cloud Functions is specifically designed for serverless compute, while others are for different computing needs.
Q89
A company needs to monitor user activity on their Cloud Storage bucket. What should they enable?
AStackdriver Logging
BAccess Control Lists
CBucket Versioning
DCloud Pub/Sub
Explanation
Stackdriver Logging will track user activity, unlike the other options which don't monitor access.
Q90
What happens when you configure IAM roles incorrectly in Google Cloud?
AUsers gain unrestricted access
BUsers may be denied access
CResource permissions remain unchanged
DBilling is not affected
Explanation
Incorrect IAM roles may prevent users from accessing resources they need, whereas other options misrepresent the impact.