Google Associate-Cloud-Engineer Quiz 10 Topic 7 Questions 46-50

Question: 1

While looking at your application's source code in your private Github repo, you've noticed that a service account key has been committed to git. What steps should you take next?

ARevoke the key, remove the key from Git, purge the Git history to remove all traces of the file, ensure the key is added to the .gitignore file.

BDelete the project and create a new one.

CDo nothing. Git is fine for keys if the repo is private.

DContact Google Cloud Support

Show Answer

Question: 2

You've been asked to help onboard a new member of the big-data team. They need full access to BigQuery. Which type of role would be the most efficient to set up while following the principle of least privilege?

APrimitive Role

BCustom Role

CManaged Role

DPredefined Role

Show Answer

Question: 3

You have 3 Cloud Storage buckets that all store sensitive dat

a. Which grantees should you audit to ensure that these buckets are not public?

AallUsers

BallAuthenticatedUsers

CpublicUsers

DallUsers and allAuthenticatedUsers

Show Answer

Question: 4

You have a 20 GB file that you need to securely share with some contractors. They need it as fast as possible. Which steps would get them the file quickly and securely?

AUsing composite objects and parallel uploads to upload the file to Cloud Storage quickly. Then generate a signed URL and securely share it with the contractors.

BSet up a VPC with a custom subnet. Create a subnet tunnel. Upload the file to a network share. Grant the contractors temporary access.

CUpload the file to Bigtable using the bulk data import tool. Then provide the contractors with read access to the database.

DUpload the file to Cloud Storage. Grant the allAuthenticated users token view permissions.

Show Answer

Question: 5

You have several users who need access to some very specific Google Cloud functionality. You'd like to follow the principle of least privilege. What's the best way to ensure these users can list Cloud Storage buckets, list BigQuery jobs, and list compute disks?

AAdd the users to the viewer role.

BUse the Cloud Storage Bucket Viewer, BigQuery Job User, and Compute User predefined roles.

CCreate a custom role for this job role, add the required permissions, and add the users to the role.

DAdd the users to a group, apply the Cloud Storage Bucket Viewer, BigQuery Job User, and Compute User predefined roles.

Show Answer

While looking at your application's source code in your private Github repo, you've noticed that a service account key has been committed to git. What steps should you take next?

You've been asked to help onboard a new member of the big-data team. They need full access to BigQuery. Which type of role would be the most efficient to set up while following the principle of least privilege?

You have 3 Cloud Storage buckets that all store sensitive data. Which grantees should you audit to ensure that these buckets are not public?

You have a 20 GB file that you need to securely share with some contractors. They need it as fast as possible. Which steps would get them the file quickly and securely?

You have several users who need access to some very specific Google Cloud functionality. You'd like to follow the principle of least privilege. What's the best way to ensure these users can list Cloud Storage buckets, list BigQuery jobs, and list compute disks?

Google Associate-Cloud-Engineer Quiz:10 Topic:7 Questions:46-50

You have 3 Cloud Storage buckets that all store sensitive dat
a. Which grantees should you audit to ensure that these buckets are not public?