A company needs to ensure that their data stored in Cloud Storage is encrypted at rest. Which configuration should they implement?
AUse default Google-managed keys
BDisable all encryption
COnly encrypt files after upload
DManually encrypt data before upload
Explanation
Using Google-managed keys automatically encrypts the data at rest; the other options either defeat encryption or complicate it unnecessarily.
Q252
What happens when you set a retention policy on a BigQuery dataset?
AData cannot be deleted for a period
BData is deleted immediately
COnly query results are retained
DData is encrypted using new keys
Explanation
A retention policy restricts data deletion for a specified timeframe, while the other options misrepresent BigQuery's functionality.
Q253
Which service should you use for real-time event processing?
ACloud Pub/Sub
BCloud Storage
CCloud Functions
DBigQuery
Explanation
Cloud Pub/Sub handles real-time message streaming, while the others focus on storage or querying.
Q254
A company needs to analyze large volumes of unstructured data stored in Cloud Storage. What is the best approach?
AUse Dataflow for data transformation
BUtilize Dataproc to run Hadoop
CUpload data to BigQuery directly
DRun AI Platform models directly
Explanation
Dataproc efficiently processes large datasets with unstructured data using Hadoop, while the other options are less optimal for direct analysis.
Q255
You are configuring IAM roles for a new service account. What happens if you provide overly permissive roles?
AImproved security for the project
BAccess will be denied completely
CIncreased risk of data exposure
DPerformance improvements for service
Explanation
Overly permissive roles can lead to unauthorized access, compromising data security, while the others do not accurately reflect consequences.
Q256
Which Google Cloud service provides fully managed NoSQL databases?
ACloud Firestore
BBigQuery
CCloud SQL
DCompute Engine
Explanation
Cloud Firestore is designed for NoSQL database needs; BigQuery is for analytics, Cloud SQL is SQL-based, and Compute Engine provides VM infrastructure.
Q257
A company needs to process streaming data from IoT devices. What GCP service is ideal?
ACloud Pub/Sub
BCloud Storage
CDataflow
DBigtable
Explanation
Cloud Pub/Sub is designed for real-time messaging; Cloud Storage is for file storage, Dataflow is for processing, and Bigtable is a database service.
Q258
What happens when you enable Object Versioning in Google Cloud Storage?
AOld versions are deleted automatically
BAll objects will be encrypted
CNew versions are created for updates
DOnly public access is granted
Explanation
Enabling Object Versioning stores previous versions upon updates; old versions aren't deleted automatically, encryption isn't automatic, and access remains unchanged.
Q259
Which service is best for real-time analytics in Google Cloud?
ABigQuery
BDataflow
CCloud Logging
DCloud Storage
Explanation
Dataflow specializes in real-time data processing, while the others serve different purposes.
Q260
A company needs to store sensitive user data with strict compliance regulations. What should they do?
AUse standard Cloud Storage buckets.
BEncrypt data and use Key Management.
CStore it publicly on GCS.
DUtilize database without encryption.
Explanation
Encryption and Key Management ensure compliance for sensitive data, unlike the other options.