1.1 Designing the Overall Resource Hierarchy for an Organization PROFESSIONAL-CLOUD-DEVOPS-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the recommended way to manage service account keys for long-term use?

   • AUse the same key for all service accounts to simplify management
   • BUse service account impersonation instead of creating and distributing keys
   • CCreate a new key every time and store it in the source code
   • DDisable the service account after creating the key
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   How can an organization enforce data residency requirements in Google Cloud?

   • ABy using VPC Network Peering to connect to a specific region
   • BBy using organization policies to restrict the regions where resources can be created
   • CBy using IAM roles to prevent users from accessing data outside the organization
   • DBy using Cloud Storage buckets with a specific storage class
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the purpose of routing logs from multiple projects to a central logging project?

   • ATo improve application performance by reducing I/O operations
   • BTo reduce the amount of log data generated by each project
   • CTo allow each project to have its own log bucket
   • DTo enable unified analysis, retention, and compliance management across all projects
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the purpose of an organization policy in Google Cloud?

   • ATo set up billing accounts for projects
   • BTo configure VPC networks
   • CTo enforce constraints on resources across the organization, such as restricting resource locations
   • DTo manage IAM roles for users
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the primary purpose of Private Service Connect?

   • ATo enable a VM to have a public IP address
   • BTo allow a VPC network to share subnets with another project
   • CTo allow private access to Google-managed services (like Cloud Storage or BigQuery) from within a VPC network
   • DTo connect two VPC networks using a VPN tunnel
   Reveal Solution Discussion Select an answer first