2.1 Determine Database Connectivity and Access Management Considerations PROFESSIONAL-CLOUD-DATABASE-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A Cloud SQL for PostgreSQL instance has a database role 'readonly' that is granted to several users. A new user needs the same read-only access. What is the most efficient way to grant this?

   • AGrant the 'readonly' role to the new user.
   • BAdd the user to the 'readonly' role's membership list.
   • CGrant SELECT on all tables to the new user directly.
   • DCreate a new role for the user and grant the same privileges.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company uses Cloud SQL for PostgreSQL. A third-party application requires database credentials to connect, but the company wants to avoid storing passwords in the application's configuration. What is the recommended approach?

   • AUse IAM database authentication with a service account for the application.
   • BCreate a database user with a password and store it in Secret Manager.
   • CUse the Cloud SQL Auth Proxy without any authentication.
   • DCreate a database user with a password and hardcode it in the application code.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A Cloud SQL for PostgreSQL instance has a database user 'analyst' who has been granted SELECT on all tables. The user is leaving the company, and a new analyst is joining. The security team wants to ensure the old user can no longer access the database and the new user has the same access. What should you do?

   • ADrop the old user and create a new user with the same privileges.
   • BCreate a new user and grant the same privileges, then drop the old user.
   • CRename the old user to the new user's name and reset the password.
   • DRevoke all privileges from the old user and grant them to the new user.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which statement is true about creating a database user in Cloud SQL for MySQL?

   • AUsers are automatically granted all privileges on all databases.
   • BUsers can be created with either a password or as an IAM-based user.
   • CUsers cannot be deleted once created.
   • DUsers can only be created using the gcloud command-line tool.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company has a Cloud SQL for MySQL instance. They have a legacy application that only supports password authentication, but they want to migrate to IAM-based authentication to improve security. What is the best approach?

   • AKeep the legacy application on password authentication and use IAM for all new applications.
   • BModify the legacy application to support IAM authentication.
   • CCreate a database user with a password that matches the IAM user's email.
   • DUse the Cloud SQL Auth Proxy to translate IAM authentication to password authentication.
   Reveal Solution Discussion Select an answer first