Google Updated Associate-Cloud-Engineer Exam Questions and Answers by evelina

https://cloud.google.com/spanner/docs/getting-started/set-up

https://cloud.google.com/kubernetes-engine/docs/concepts/deployment

Preventing Accidental VM Deletion This document describes how to protect specific VM instances from deletion by setting the deletionProtection property on an Instance resource. To learn more about VM instances, read the Instances documentation. As part of your workload, there might be certain VM instances that are critical to running your application or services, such as an instance running a SQL server, a server used as a license manager, and so on. These VM instances might need to stay running indefinitely so you need a way to protect these VMs from being deleted. By setting the deletionProtection flag, a VM instance can be protected from accidental deletion. If a user attempts to delete a VM instance for which you have set the deletionProtection flag, the request fails. Only a user that has been granted a role with compute.instances.create permission can reset the flag to allow the resource to be deleted.https://cloud.google.com/compute/docs/instances/preventing-accidental-vm-deletion

The correct answer is A because the requirement is company-wide access for employees in one Cloud Identity domain, not public or cross-domain access. The BigQuery Data Viewer role provides read-only access to dataset resources, including reading and querying table data when granted at the dataset level. Using the domain principal domain:terramearth.com grants access to authenticated users in that organization’s domain. allUsers would include unauthenticated public access, and allAuthenticatedUsers would include any authenticated Google account, which is far broader than the company boundary. A service account represents an application identity, not all human employees.