Google Associate Cloud Engineer

• #41

  You recently deployed a new version of an application to App Engine and then discovered a bug in the release. You need to immediately revert to the prior version of the application. What should you do?

  • ARun gcloud app restore.
  • BOn the App Engine page of the GCP Console, select the application that needs to be reverted and click Revert.
  • COn the App Engine Versions page of the GCP Console, route 100% of the traffic to the previous version.
  • DDeploy the original version as a separate application. Then go to App Engine settings and split traffic between applications so that the original version serves 100% of the requests.
  Show answer
• #42

  Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?

  • A1. Create an IAM entry for each data scientist's user account. 2. Assign the BigQuery jobUser role to the group.
  • B1. Create an IAM entry for each data scientist's user account. 2. Assign the BigQuery dataViewer user role to the group.
  • C1. Create a dedicated Google group in Cloud Identity. 2. Add each data scientist's user account to the group. 3. Assign the BigQuery jobUser role to the group.
  • D1. Create a dedicated Google group in Cloud Identity. 2. Add each data scientist's user account to the group. 3. Assign the BigQuery dataViewer user role to the group.
  Show answer
• #43

  Your organization has strict requirements to control access to Google Cloud projects. You need to enable your Site Reliability Engineers (SREs) to approve requests from the Google Cloud support team when an SRE opens a support case. You want to follow Google-recommended practices. What should you do?

  • AAdd your SREs to roles/iam.roleAdmin role.
  • BAdd your SREs to roles/accessapproval.approver role.
  • CAdd your SREs to a group and then add this group to roles/iam.roleAdmin.role.
  • DAdd your SREs to a group and then add this group to roles/accessapproval.approver role.
  Show answer
• #44

  You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?

  • AWhen creating the VM, use machine type n1-standard-96.
  • BWhen creating the VM, use Intel Skylake as the CPU platform.
  • CCreate the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.
  • DStart the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
  Show answer
• #45

  You have an object in a Cloud Storage bucket that you want to share with an external company. The object contains sensitive data. You want access to the content to be removed after four hours. The external company does not have a Google account to which you can grant specific user-based access privileges. You want to use the most secure method that requires the fewest steps. What should you do?

  • ACreate a signed URL with a four-hour expiration and share the URL with the company.
  • BSet object access to 'public' and use object lifecycle management to remove the object after four hours.
  • CConfigure the storage bucket as a static website and furnish the object's URL to the company. Delete the object from the storage bucket after four hours.
  • DCreate a new Cloud Storage bucket specifically for the external company to access. Copy the object to that bucket. Delete the bucket after four hours have passed.
  Show answer
• #46

  Your management has asked an external auditor to review all the resources in a specific project. The security team has enabled the Organization Policy called Domain Restricted Sharing on the organization node by specifying only your Cloud Identity domain. You want the auditor to only be able to view, but not modify, the resources in that project. What should you do?

  • AAsk the auditor for their Google account, and give them the Viewer role on the project.
  • BAsk the auditor for their Google account, and give them the Security Reviewer role on the project.
  • CCreate a temporary account for the auditor in Cloud Identity, and give that account the Viewer role on the project.
  • DCreate a temporary account for the auditor in Cloud Identity, and give that account the Security Reviewer role on the project.
  Show answer
• #47

  You deployed an App Engine application using gcloud app deploy, but it did not deploy to the intended project. You want to find out why this happened and where the application deployed. What should you do?

  • ACheck the app.yaml file for your application and check project settings.
  • BCheck the web-application.xml file for your application and check project settings.
  • CGo to Deployment Manager and review settings for deployment of applications.
  • DGo to Cloud Shell and run gcloud config list to review the Google Cloud configuration used for deployment.
  Show answer
• #48

  Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment). What should you do?

  • ACreate a new service with the new version of the application. Split traffic between this version and the version that is currently running.
  • BCreate a new revision with the new version of the application. Split traffic between this version and the version that is currently running.
  • CCreate a new service with the new version of the application. Add HTTP Load Balancer in front of both services.
  • DCreate a new revision with the new version of the application. Add HTTP Load Balancer in front of both revisions.
  Show answer
• #49

  You have sensitive data stored in three Cloud Storage buckets and have enabled data access logging. You want to verify activities for a particular user for these buckets, using the fewest possible steps. You need to verify the addition of metadata labels and which files have been viewed from those buckets. What should you do?

  • AUsing the GCP Console, filter the Activity log to view the information.
  • BUsing the GCP Console, filter the Stackdriver log to view the information.
  • CView the bucket in the Storage section of the GCP Console.
  • DCreate a trace in Stackdriver to view the information.
  Show answer
• #50

  You need to deploy an application, which is packaged in a container image, in a new project. The application exposes an HTTP endpoint and receives very few requests per day. You want to minimize costs. What should you do?

  • ADeploy the container on Cloud Run.
  • BDeploy the container on Cloud Run on GK.
  • CDeploy the container on App Engine Flexible.
  • DDeploy the container on Google Kubernetes Engine, with cluster autoscaling and horizontal pod autoscaling enabled.
  Show answer
• #51

  You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?

  • AConfigure an HTTP(S) load balancer.
  • BConfigure an internal TCP load balancer.
  • CConfigure an external SSL proxy load balancer.
  • DConfigure an external TCP proxy load balancer.
  Show answer
• #52

  You want to verify the IAM users and roles assigned within a GCP project named my-project. What should you do?

  • ARun gcloud iam roles list. Review the output section.
  • BRun gcloud iam service-accounts list. Review the output section.
  • CNavigate to the project and then to the IAM section in the GCP Console. Review the members and roles.
  • DNavigate to the project and then to the Roles section in the GCP Console. Review the roles and status.
  Show answer
• #53

  You need to set up a policy so that videos stored in a specific Cloud Storage Regional bucket are moved to Coldline after 90 days, and then deleted after one year from their creation. How should you set up the policy?

  • AUse Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 275 days (365-90).
  • BUse Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 365 days.
  • CUse gsutil rewrite and set the Delete action to 275 days (365-90).
  • DUse gsutil rewrite and set the Delete action to 365 days.
  Show answer
• #54

  You need to create a custom VPC with a single subnet. The subnet's range must be as large as possible. Which range should you use?

  • A0.0.0.0/0.
  • B10.0.0.0/8.
  • C172.16.0.0/12.
  • D192.168.0.0/16.
  Show answer
• #55

  You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below. You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

  • AStore the database password inside the Docker image of the container, not in the YAML file.
  • BStore the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
  • CStore the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
  • DStore the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.
  Show answer
• #56

  You have designed a solution on Google Cloud that uses multiple Google Cloud products. Your company has asked you to estimate the costs of the solution. You need to provide estimates for the monthly total cost. What should you do?

  • AFor each Google Cloud product in the solution, review the pricing details on the products pricing page. Use the pricing calculator to total the monthly costs for each Google Cloud product.
  • BFor each Google Cloud product in the solution, review the pricing details on the products pricing page. Create a Google Sheet that summarizes the expected monthly costs for each product.
  • CProvision the solution on Google Cloud. Leave the solution provisioned for 1 week. Navigate to the Billing Report page in the Cloud Console. Multiply the 1 week cost to determine the monthly costs.
  • DProvision the solution on Google Cloud. Leave the solution provisioned for 1 week. Use Cloud Monitoring to determine the provisioned and used resource amounts. Multiply the 1 week cost to determine the monthly costs.
  Show answer
• #57

  Your Managed Instance Group raised an alert stating that new instance creation has failed to create new instances. You need to maintain the number of running instances specified by the template to be able to process expected application traffic. What should you do?

  • ACreate an instance template that contains valid syntax which will be used by the instance group. Delete any persistent disks with the same name as instance names.
  • BCreate an instance template that contains valid syntax that will be used by the instance group. Verify that the instance name and persistent disk name values are not the same in the template.
  • CVerify that the instance template being used by the instance group contains valid syntax. Delete any persistent disks with the same name as instance names. Set the disks.autoDelete property to true in the instance template.
  • DDelete the current instance template and replace it with a new instance template. Verify that the instance name and persistent disk name values are not the same in the template. Set the disks.autoDelete property to true in the instance template.
  Show answer
• #58

  You have a Compute Engine instance hosting a production application. You want to receive an email if the instance consumes more than 90% of its CPU resources for more than 15 minutes. You want to use Google services. What should you do?

  • A1. Create a consumer Gmail account. 2. Write a script that monitors the CPU usage. 3. When the CPU usage exceeds the threshold, have that script send an email using the Gmail account and smtp.gmail.com on port 25 as SMTP server.
  • B1. Create a Stackdriver Workspace, and associate your Google Cloud Platform (GCP) project with it. 2. Create an Alerting Policy in Stackdriver that uses the threshold as a trigger condition. 3. Configure your email address in the notification channel.
  • C1. Create a Stackdriver Workspace, and associate your GCP project with it. 2. Write a script that monitors the CPU usage and sends it as a custom metric to Stackdriver. 3. Create an uptime check for the instance in Stackdriver.
  • D1. In Stackdriver Logging, create a logs-based metric to extract the CPU usage by using this regular expression: CPU Usage: ([0-9] {1,3})% 2. In Stackdriver Monitoring, create an Alerting Policy based on this metric. 3. Configure your email address in the notification channel.
  Show answer
• #59

  You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?

  • AArrange to switch to Flat-Rate pricing for this query, then move back to on-demand.
  • BUse the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.
  • CUse the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.
  • DRun a select count () to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.
  Show answer
• #60

  You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes. Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?

  • AFill in local SSD. Fill in persistent disk storage and snapshot storage.
  • BFill in local SSD. Add estimated cost for cluster management.
  • CSelect Add GPUs. Fill in persistent disk storage and snapshot storage.
  • DSelect Add GPUs. Add estimated cost for cluster management.
  Show answer

Want to track your score, take timed mock exams and get AI explanations? Create a free account