You are configuring IAM roles for a sensitive project. Which principle should you prioritize?
ARole pooling for efficiency
BLeast privilege access
CFull access for all users
DInheritance of roles automatically
Explanation
Least privilege access minimizes exposure to risks by granting only necessary permissions.
Q232
Which service is best for real-time analytics on streaming data?
ABigQuery
BDataflow
CCloud Pub/Sub
DCloud SQL
Explanation
Dataflow is designed for real-time analytics, while others serve different functions.
Q233
A company needs to process batches of large datasets on a schedule. Which Google Cloud service is ideal?
ACloud Functions
BCloud Run
CCloud Dataflow
DCloud Composer
Explanation
Cloud Composer orchestrates workflows, making it suitable for scheduled batch processing.
Q234
What happens when you enable the 'audit logging' feature in Google Cloud?
AAll project data is encrypted.
BAll API calls are recorded.
CUser permissions are revoked.
DBilling is increased automatically.
Explanation
Audit logging captures API activity, while other options are incorrect changes to project behavior.
Q235
Which service is best for real-time data processing?
AApache Beam
BCloud Functions
CBigQuery
DCloud Storage
Explanation
Apache Beam provides a unified model for batch and streaming data processing, while others are not primarily aimed at real-time processing.
Q236
A company needs to store sensitive user data securely. Which storage option is best?
ACloud Storage with uniform access
BCloud SQL with SSL
CFirestore without security rules
DBigtable with public access
Explanation
Cloud SQL with SSL ensures data is encrypted in transit and stored securely, while other options lack adequate security measures.
Q237
What happens when you set a lower retention duration on a BigQuery table?
AData is retained forever
BData is deleted immediately
COlder data is purged periodically
DSchema changes are lost
Explanation
A lower retention duration means older data will be purged based on the new retention rule, while other options are incorrect based on how retention works.
Q238
Which service is used for building machine learning models on Google Cloud?
AAI Platform
BBigQuery
CCloud Functions
DDataflow
Explanation
AI Platform provides curated tools for ML model development, while the others serve different purposes.
Q239
A company needs to ensure that their Cloud Storage buckets are not publicly accessible. What is the best approach?
AUse IAM roles to restrict access
BSet buckets to public access
CEnable object versioning
DDisable all permissions
Explanation
Using IAM roles allows precise control of access, while others may cause undesired access levels.
Q240
What happens when you enable data encryption in BigQuery?
AData is stored unencrypted
BOnly data at rest is encrypted
CData is encrypted both at rest and transit
DEncryption reduces data read speed
Explanation
BigQuery encrypts data both at rest and during transit, enhancing security, while other options provide incorrect information.