Free Cloud Engineer: Essential Google Infrastructure Questions and Answers — Questions and Answers
Question 1: What abstraction is most frequently used to manage access in cloud IAM?
- Roles, an abstraction of job roles (Correct answer)
- Leases, an abstraction of periodic entitlements
- Privileges, an abstraction of access rights
- Credential, an abstraction of access rights
Correct answer: Roles, an abstraction of job roles
In cloud Identity and Access Management (IAM), 'Roles' are the most frequently used abstraction to manage access. Roles are collections of permissions that define what actions an identity (user, service account) can perform on specific resources. By assigning roles, cloud providers simplify the process of granting and managing access rights based on job functions, rather than assigning individual permissions.
Question 2: Which of the subsequent is not an IAM role type?
- Custom
- Advanced (Correct answer)
- Basic
- Predefined
Correct answer: Advanced
In cloud IAM systems like Google Cloud IAM, the standard role types are Basic (Owner, Editor, Viewer), Predefined (service-specific roles), and Custom (user-defined roles). 'Advanced' is not a recognized or standard category for IAM role types across major cloud providers.
Question 3: What kind of IAM member is not one of the following?
- Service Account
- Google Group
- Cloud Identity domain
- Google Workspace domain
- Organization Account (Correct answer)
- Google Account
Correct answer: Organization Account
In cloud IAM, members are the entities that can be granted roles. Common member types include Google Accounts (individual users), Service Accounts (for applications), Google Groups (collections of accounts), and Cloud Identity/Google Workspace domains (all users in a domain). 'Organization Account' is not a standard or recognized IAM member type.
Question 4: What data storage service could you use if you only needed to move a relational database operating on a single computer in a data center to the cloud?
- Cloud Storage
- Cloud SQL (Correct answer)
- BigQuery
- Persistent Disk
Correct answer: Cloud SQL
If you need to move a relational database operating on a single computer to the cloud, Cloud SQL is the appropriate data storage service. Cloud SQL is a fully managed relational database service for MySQL, PostgreSQL, and SQL Server, designed for single-instance databases. It handles database administration tasks, making it ideal for lifting and shifting existing relational databases.
Question 5: Which Google Cloud data storage solution supports global scalability and ACID transactions?
- Cloud Spanner (Correct answer)
- Cloud Storage Cloud CDN
- Cloud SQL
Correct answer: Cloud Spanner
Cloud Spanner is the Google Cloud data storage solution that supports global scalability and strong ACID transactions. It is a unique, globally distributed relational database service that combines the benefits of traditional relational databases (ACID properties, SQL semantics) with the horizontal scalability and high availability typically found in NoSQL databases, making it suitable for mission-critical applications requiring global consistency.
Question 6: Which data storage provider offers an interactive SQL interface for data querying and data warehousing services for data storage?
- Cloud Dataproc
- BigQuery (Correct answer)
- Cloud SQL
- Cloud Datalab
Correct answer: BigQuery
BigQuery is Google Cloud's fully managed, serverless enterprise data warehouse that offers an interactive SQL interface for data querying and robust data warehousing services. It is designed for analyzing massive datasets quickly and efficiently, making it the go-to solution for business intelligence, analytics, and large-scale data exploration using standard SQL.
Question 7: Google Cloud resources can only be used by being linked to...
- A virtual machine
- A user
- A bucket
- A project (Correct answer)
Correct answer: A project
In Google Cloud, all resources must be linked to a 'Project'. A project serves as the fundamental organizational unit for all Google Cloud resources, providing a boundary for billing, quotas, permissions, and resource management. Without a project, you cannot create or use any Google Cloud resources.
Free Cloud Engineer: Essential Google Infrastructure Questions and Answers
What abstraction is most frequently used to manage access in cloud IAM?