You are configuring IAM permissions for a Google Cloud project. What happens if a user has both a Role with minimal permissions and a more permissive Role applied?
AUser gets higher permissions only
BMore restrictive permissions applied
CNo permissions granted
DUser has combined permissions
Explanation
In IAM, users inherit the highest permission level from all roles assigned.
Q442
Which service is best for real-time data processing?
ACloud Pub/Sub
BBigQuery
CCloud Storage
DCloud Functions
Explanation
Cloud Pub/Sub supports real-time streaming, while others are for batch processing or storage.
Q443
A company needs to analyze large datasets frequently. What is the best approach?
AUse Cloud SQL
BImplement Dataflow
CUse Cloud Storage
DUtilize BigQuery
Explanation
BigQuery is optimized for querying large datasets quickly, unlike the other options.
Q444
You are configuring IAM permissions for a new service. What happens if roles are assigned incorrectly?
AAccess is always denied
BAccess may be granted unexpectedly
CService will disable all roles
DPermissions reset to default
Explanation
Incorrect role assignments can unintentionally grant more access than intended.
Q445
Which service is best for real-time analytical processing?
ABigQuery
BCloud Storage
CCloud Pub/Sub
DCloud Firestore
Explanation
BigQuery is optimized for real-time analytics, while others serve different purposes like storage or messaging.
Q446
A company needs to run machine learning models on a large dataset efficiently. What is the most suitable service?
ACompute Engine
BAI Platform
CApp Engine
DCloud Functions
Explanation
AI Platform is designed specifically for running ML models, while Compute Engine and others are more general-purpose compute services.
Q447
You are configuring access for a new role in Cloud IAM. What happens if you do not grant the 'iam.serviceAccounts.actAs' permission?
AService account cannot be used
BUser can still impersonate accounts
CRole defaults to admin rights
DIAM policy inherits automatically
Explanation
Without 'iam.serviceAccounts.actAs', a user cannot impersonate the service account, affecting its usage.
Q448
Which service is used for real-time stream processing in Google Cloud?
ADataflow
BBigQuery
CCloud Storage
DPub/Sub
Explanation
Dataflow is specifically designed for stream processing, while the others serve different purposes.
Q449
A company needs to analyze large datasets quickly without managing servers. What should they use?
ACloud Spanner
BBigQuery
CCloud SQL
DData fusion
Explanation
BigQuery is a serverless data warehouse suitable for large datasets, unlike the other options which require server management.
Q450
What happens when you delete a Cloud Storage bucket that contains objects?
AOnly bucket is deleted
BObjects are deleted too
CObjects are archived automatically
DBucket can be restored easily
Explanation
Deleting a bucket removes all its objects permanently; restoration is not possible.