Official Google Cloud Platform Associate Cloud Engineer Study Guide (April 2019) - corrected multiple choice from hnryjmes

What is the fundamental unit of computing in cloud computing? A. Physical server B. VM C. Block D. Subnet

B. VM

To ensure you have installed beta gcloud commands, which command should you run? A. gcloud components beta install B. gcloud components install beta C. gcloud commands install beta D. gcloud commands beta install

B. gcloud components install beta

You are using gcloud to create a firewall rule. Which command would you use? A. gcloud network firewall-rules create B. gcloud compute firewall-rules create C. gcloud network rules create D. gcloud compute rules create

B. gcloud compute firewall-rules create

How would you delete an instance group template using the command line? A. gcloud compute instances instance-template delete B. gcloud compute instance-templates delete C. gcloud compute delete instance-template D. gcloud compute delete instance-templates

B. gcloud compute instance-templates delete

You have a number of buckets containing old data that is hardly ever used. You don't want to delete it, but you want to minimize the cost of storing it. You decide to change the storage class to coldline for each of those buckets. What is the command structure that you would use? A. gcloud rewrite -s [STORAGE_CLASS] gs://[PATH_TO_OBJECT] B. gsutil rewrite -s [STORAGE_CLASS] gs://[PATH_TO_OBJECT] C. cbt rewrite -s [STORAGE_CLASS] gs://[PATH_TO_OBJECT] D. bq rewrite -s [STORAGE_CLASS] gs://[PATH_TO_OBJECT]

B. gsutil rewrite -s [STORAGE_CLASS] gs://[PATH_TO_OBJECT]

A scope is identified using what kind of identifier? A. A randomly generated ID B. A URL beginning with https://www.googleserviceaccounts/ C. A URL beginning with https://www.googleapis.com/auth/ D. A URL beginning with https://www.googleapis.com/auth/PROJECT_ID]

C. A URL beginning with https://www.googleapis.com/auth/

As required by your company's policy, you need to back up your Datastore database at least once per day. An auditor is questioning whether or not Datastore export is sufficient. You explain that the Datastore export command produces what outputs? A. A single entity file B. A metadata file C. A metadata file and a folder with the data D. A metadata file, an entity file, and a folder with the data

C. A metadata file and a folder with the data

What is a pod in Kubernetes? A. A set of containers B. Application code deployed in a Kubernetes cluster C. A single instance of a running process in a cluster D. A controller that manages communication between clients and Kubernetes services

C. A single instance of a running process in a cluster

Your manager has asked for your help in reducing Cloud Storage charges. You know that some of the files stored in Cloud Storage are rarely accessed. What kind of storage would you recommend for those files? A. Nearline B. Regional C. Coldline D. Multiregional

C. Coldline

When you create a hierarchy, you can have more than one of which structure? A. Organization only B. Folder only C. Folder and project D. Project only

C. Folder and project

What is the query language used by Datastore? A. SQL B. MDX C. GQL D. DataFrames

C. GQL

You are using Cloud Console to create a VPN. You want to configure the GCP end of the VPN. What section of the Create VPN form would you use? A. Tunnels B. Routing Options C. Google Compute Engine VPN D. IKE Version

C. Google Compute Engine VPN

Which load balancers provide global load balancing? A. HTTP(S) only B. SSL Proxy and TCP Proxy only C. HTTP(S), SSL Proxy, and TCP Proxy D. Internal TCP/UDP, HTTP(S), SSL Proxy, and TCP Proxy

C. HTTP(S), SSL Proxy, and TCP Proxy

What GCP service is used to view audit logs? A. Compute Engine B. Cloud Storage C. Stackdriver Logging D. Custom logging

C. Stackdriver Logging

Which of the following commands is used to create buckets in Cloud Storage? A. gcloud storage buckets create B. gsutil storage buckets create C. gsutil mb D. gcloud mb

C. gsutil mb

How much memory of a node does Kubernetes require as overhead? A. 10GB to 20GB B. 1GB to 2GB C. 1.5GB D. A scaled amount starting at 25 percent of memory and decreasing to 2 percent of marginal memory as the total amount of memory increases.

D. A scaled amount starting at 25 percent of memory and decreasing to 2 percent of marginal memory as the total amount of memory increases.

You are deploying a Cloud Launcher application that includes a LAMP stack. What software will this deploy? A. Apache server and Linux only B. Linux only C. MySQL and Apache only D. Apache, MySQL, Linux, and PHP

D. Apache, MySQL, Linux, and PHP

Which of the following are database services that do not require you to specify configuration information for VMs? A. BigQuery only B. Datastore only C. Firebase and Datastore D. BigQuery, Datastore, and Firebase

D. BigQuery, Datastore, and Firebase

All block storage systems use what block size? A. 4KB B. 8KB C. 16KB D. Block size can vary.

D. Block size can vary.

Which of the following are options for logging sinks? A. Cloud Storage bucket only B. BigQuery dataset and Cloud Storage bucket only C. Cloud Pub/Sub topic only D. Cloud Storage bucket, BigQuery dataset, and Cloud Pub/Sub topic

D. Cloud Storage bucket, BigQuery dataset, and Cloud Pub/Sub topic

You have decided to delegate the task of making backup snapshots to a member of your team. What role would you need to grant to your team member to create snapshots? A. Compute Image Admin B. Storage Admin C. Compute Snapshot Admin D. Compute Storage Admin

D. Compute Storage Admin

You have created a condition of CPU utilization, and you want to receive notifications. Which of the following are options? A. Email only B. PagerDuty only C. Hipchat and PagerDuty D. Email, PagerDuty, and Hipchat

D. Email, PagerDuty, and Hipchat [this answer is out of date]

What are the license types referenced in Cloud Launcher? A. Free only B. Free and Paid only C. Free and Bring your own license (BYOL) only D. Free, paid, and bring your own license

D. Free, paid, and bring your own license

Virtual private clouds have a __________ scope. A. Zonal B. Regional C. Super-regional D. Global

D. Global

Stackdriver can be used to monitor resources where? A. In Google Cloud Platform only B. In Google Cloud Platform and Amazon Web Services only C. In Google Cloud Platform and on premises data centers D. In Google Cloud Platform, Amazon Web Services, and on premises data centers

D. In Google Cloud Platform, Amazon Web Services, and on premises data centers

Which of the following can be used to filter log entries when viewing logs in Stackdriver Logging? A. Label or text search only B. Resource type and log type only C. Time and resource type only D. Label or text search, resource type, log type, and time

D. Label or text search, resource type, log type, and time

Which of the following Cloud Spanner configurations would have the highest hourly cost? A. Located in us-central1 B. Located in nam3 C. Located in us-west1-a D. Located in nam-eur-asia1

D. Located in nam-eur-asia1

You have been assigned the task of consolidating log data generated by each instance of an application. Which of the Stackdriver management tools would you use? A. Monitoring B. Trace C. Debugger D. Logging

D. Logging

What types of events are available to Cloud Functions working with Cloud Storage? A. Upload or finalize and delete only B. Upload or finalize, delete, and list only C. Upload or finalize, delete, and metadata update only D. Upload or finalize, delete, metadata update, and archive

D. Upload or finalize, delete, metadata update, and archive

As a developer on a project using Bigtable for an IoT application, you will need to export data from Bigtable to make some data available for analysis with another tool. What would you use to export the data, assuming you want to minimize the amount of effort required on your part? A. A Java program designed for importing and exporting data from Bigtable B. gcloud bigtable table export C. bq bigtable table export D. An import tool provided by the analysis tool

A. A Java program designed for importing and exporting data from Bigtable

What kinds of instances are required to have a Kubernetes cluster? A. A cluster master and nodes to execute workloads. B. A cluster master, nodes to execute workloads, and Stackdriver nodes to monitor node health. C. Kubernetes nodes; all instances are the same. D. Instances with at least four vCPUs.

A. A cluster master and nodes to execute workloads.

Before you can start storing data in BigQuery, what must you create? A. A data set B. A bucket C. A persistent disk D. An entity

A. A data set

You've just released an application running in App Engine Standard. You notice that there are peak demand periods in which you need up to 12 instances, but most of the time 5 instances are sufficient. What is the best way to ensure that you have enough instances to meet demand without spending more than you have to? A. Configure your app for autoscaling and specify max instances of 12 and min instances of 5. B. Configure your app for basic scaling and specify max instances of 12 and min instances of 5. C. Create a cron job to add instances just prior to peak periods and remove instances after the peak period is over. D. Configure your app for instance detection and do not specify a max or minimum number of instances.

A. Configure your app for autoscaling and specify max instances of 12 and min instances of 5.

You want the router on a tunnel you are creating to learn routes from all GCP regions on the network. What feature of GCP routing would you enable? A. Global dynamic routing B. Regional routing C. VPC D. Firewall rules

A. Global dynamic routing

The CEO of your startup just read a news report about a company that was attacked by something called cache poisoning. The CEO wants to implement additional security measures to reduce the risk of DNS spoofing and cache poisoning. What would you recommend? A. Using DNSSEC B. Adding SOA records C. Adding CNAME records D. Deleting CNAME records

A. Using DNSSEC

What kubectl command is used to add a service? A. run B. start C. initiate D. deploy

A. run

When you create a cloud router, what kind of unique identifier do you need to assign for the BGP protocol? A. IP address B. ASN C. Dynamic load routing ID D. None of the above

B. ASN

Grouping a set of metrics that arrive in a period of time into regular-sized buckets is called what? A. Aggregation B. Alignment C. Minimization D. Consolidation

B. Alignment

You need serverless computing for file processing and running the backend of a website; which two products can you choose from Google Cloud Platform? A. Kubernetes Engine and Compute Engine B. App Engine and Cloud Functions C. Cache D. Network File System

B. App Engine and Cloud Functions

Your client's transactions must access a drive attached to a VM that allows for random access to parts of files. What kind of storage does the attached drive provide? A. Object storage B. Block storage C. NoSQL storage D. Only SSD storage

B. Block storage

You are viewing log entries and spot one that looks suspicious. You are not familiar with the kind of log entry, and you want to see the complete details of the log entry as quickly as possible. What would you do? A. Drill down one by one into each structure in the log entry. B. Click Expand all to show all details. C. Write a Python script to reformat the log entry. D. Click the Show Detail link next to the log entry.

B. Click Expand all to show all details.

You are running several microservices in a Kubernetes cluster. You've noticed some performance degradation. After reviewing some logs, you begin to think the cluster may be improperly configured, and you open Cloud Console to investigate. How do you see the details of a specific cluster? A. Type the cluster name into the search bar. B. Click the cluster name. C. Use the gcloud cluster details command. D. None of the above.

B. Click the cluster name.

Your department is deploying an application that has a database backend. You are concerned about the read load on the database server and want to have data available in memory to reduce the time to respond to queries and to reduce the load on the database server. Which GCP service would you use to keep data in memory? A. Cloud SQL B. Cloud Memorystore C. Cloud Spanner D. Cloud Datastore

B. Cloud Memorystore

A product manager has asked for your advice on which database services might be options for a new application. Transactions and support for tabular data are important. Ideally, the database would support common query tools. What databases would you recommend the product manager consider? A. BigQuery and Spanner B. Cloud SQL and Spanner C. Cloud SQL and Bigtable D. Bigtable and Spanner

B. Cloud SQL and Spanner

Database designers at your company are debating the best way to move a database to GCP. The database supports an application with a global user base. Users expect support for transactions and the ability to query data using commonly used query tools. The database designers decide that any database service they choose will need to support ANSI 2011 and global transactions. Which database service would you recommend? A. Cloud SQL B. Cloud Spanner C. Cloud Datastore D. Cloud Bigtable

B. Cloud Spanner

You would like to estimate the cost of GCP resources you will be using. Which services would require you to have information on the virtual machines you will be using? A. Compute Engine and BigQuery B. Compute Engine and Kubernetes Engine C. BigQuery and Kubernetes Engine D. BigQuery and Cloud Pub/Sub

B. Compute Engine and Kubernetes Engine

Which of the following is not a standard log level that can be used to filter log viewings? A. Critical B. Halted C. Warning D. Info

B. Halted

You want to modify the number of pods in a cluster. What is the best way to do that? A. Modify pods directly B. Modify deployments C. Modify node pools directly D. Modify nodes

B. Modify deployments

You want to use Cloud Console to review the records in a DNS entry. What section of Cloud Console would you navigate to? A. Compute Engine B. Network Services C. Kubernetes Engine D. Hybrid Connectivity

B. Network Services

You have been tasked with defining CIDR ranges to use with a project. The project includes 2 VPCs with several subnets in each VPC. How many CIDR ranges will you need to define? A. One for each VPC B. One for each subnet C. One for each region D. One for each zone

B. One for each subnet

Which license type will add charges to your GCP bill when using Cloud Launcher with this type of license? A. Free B. Paid C. BYOL D. Chargeback

B. Paid

You are starting up a VM to experiment with a new Python data science library. You'll SSH via the server name into the VM, use the Python interpreter interactively for a while and then shut down the machine. What type of IP address would you assign to this VM? A. Ephemeral B. Static C. Permanent D. IPv8

A. Ephemeral

You have created several subnets. Most of them are sending logs to Stackdriver. One subnet is not sending logs. What option may have been misconfigured when creating the subnet that is not forwarding logs? A. Flow Logs B. Private IP Access C. Stackdriver Logging D. Variable-Length Subnet Masking

A. Flow Logs

You will be building a number of machine learning models on an instance and attaching GPU to the instance. When you run your machine learning models they take an unusually long time to run. It appears that GPU is not being used. What could be the cause of this? A. GPU libraries are not installed. B. The operating system is based on Ubuntu. C. You do not have at least eight CPUs in the instance. D. There isn't enough persistent disk space available.

A. GPU libraries are not installed.

What type of trigger allows developers to use HTTP POST, GET, and PUT calls to invoke a cloud function? A. HTTP B. Webhook C. Cloud HTTP D. None of the above

A. HTTP

If you expand the More link in the Networking section when deploying a Cloud Launcher solution, what will you be able to configure? A. IP addresses B. Billing C. Access controls D. Custom machine type

A. IP addresses

Where can you view a list of services when using Cloud Console? A. In the Deployment Details page B. In the Container Details page C. In the Cluster Details page D. None of the above

A. In the Deployment Details page

You are deploying a distributed system. Messages will be passed between Compute Engine VMs using a reliable UDP protocol. All VMs are in the same region. You want to use the load balancer that best fits these requirements. Which kind of load balancer would you use? A. Internal TCP/UDP B. TCP Proxy C. SSL Proxy D. HTTP(S)

A. Internal TCP/UDP

A team of developers has created an optimized version of a service. This should run 30 percent faster in most cases. They want to roll it out to all users immediately, but you are concerned that the substantial changes need to be released slowly in case there are significant bugs. What can you do to allocate some users to the new version without exposing all users to it? A. Issue the command gcloud app services set-traffic. B. Issue the command gcloud instances services set-traffic. C. Issue the command gcloud app set-traffic. D. Change the target IP address of the service for some clients.

A. Issue the command gcloud app services set-traffic.

You are using Cloud Console and want to check on some jobs running in BigQuery. You navigate to the BigQuery part of the console. Which menu item would you click to view jobs? A. Job History. B. Active Jobs. C. My Jobs. D. You can't view job status in the console; you have to use bq on the command line.

A. Job History.

When using versioning on a bucket, what is the latest version of the object called? A. Live version B. Top version C. Active version D. Safe version

A. Live version

You are supporting machine learning engineers who are testing a series of classifiers. They have five classifiers, called ml-classifier-1, ml-classifier-2, etc. They have found that ml- classifier-3 is not functioning as expected and they would like it removed from the cluster. What would you do to delete a service called ml-classifier-3? A. Run the command kubectl delete service ml-classifier-3. B. Run the command kubectl delete ml-classifier-3. C. Run the command gcloud service delete ml-classifier-3. D. Run the command gcloud container service delete ml-classifier-3.

A. Run the command kubectl delete service ml-classifier-3.

A database administrator has asked for an export of a MySQL database in Cloud SQL. The database administrator will load the data into another relational database and would to do it with the least amount of work. Specifically, the loading method should not require the database administrator to define a schema. What file format would you recommend for this task? A. SQL B. CSV C. XML D. JSON

A. SQL

You have deployed an application to a Kubernetes cluster. You have noticed that several pods are starved for resources for a period of time and the pods are shut down. When resources are available, new instantiations of those pods are created. Clients are still able to connect to pods even though the new pods have different IP addresses from the pods that were terminated. What Kubernetes component makes this possible? A. Services B. ReplicaSet C. Alerts D. StatefulSet

A. Services

You want to write a script to deploy a Kubernetes cluster with GPUs. You have deployed clusters before, but you are not sure about all the required parameters. You need to deploy this script as quickly as possible. What is one way to develop this script quickly? A. Use the GPU template in the Kubernetes Engine cloud console to generate the gcloud command to create the cluster B. Search the Web for a script C. Review the documentation on gcloud parameters for adding GPUs D. Use an existing script and add parameters for attaching GPUs

A. Use the GPU template in the Kubernetes Engine cloud console to generate the gcloud command to create the cluster

An application development team is deploying a set of specialized service endpoints and wants to limit traffic so that only traffic going to one of the endpoints is allowed through by firewall rules. The service endpoints will accept any UDP traffic and each endpoint will use a port in the range of 20000-30000. Which of the following commands would you use? A. gcloud compute firewall-rules create fwr1 --allow=udp:20000-30000 --direction=ingress B. gcloud network firewall-rules create fwr1 --allow=udp:20000-30000 --direction=ingress C. gcloud compute firewall-rules create fwr1 --allow=udp D. gcloud compute firewall-rules create fwr1 --direction=ingress

A. gcloud compute firewall-rules create fwr1 --allow=udp:20000-30000 --direction=ingress

What command is used to create a network load balancer at the command line? A. gcloud compute forwarding-rules create B. gcloud network forwarding-rules create C. gcloud compute create forwarding-rules D. gcloud network create forwarding-rules

A. gcloud compute forwarding-rules create

You need to look up what images are available in the zone in which you want to deploy a VM. What command would you use? A. gcloud compute images list B. gcloud images list C. gsutil compute images list D. gcloud compute list images

A. gcloud compute images list

What gcloud command would you use to assign a service account when creating a VM? A. gcloud compute instances create [INSTANCE_NAME] --service-account [SERVICE_ACCOUNT_EMAIL] B. gcloud compute instances create-service-account [INSTANCE_NAME][SERVICE_ACCOUNT_EMAIL] C. gcloud compute instances define-service-account [INSTANCE_NAME][SERVICE_ACCOUNT_EMAIL] D. gcloud compute create instances-service-account [INSTANCE_NAME][SERVICE_ACCOUNT_EMAIL]

A. gcloud compute instances create [INSTANCE_NAME] --service-account

You are about to delete an instance named ch06-instance-1 but want to keep its boot disk. You do not want to keep other attached disks. What gcloud command would you use? A. gcloud compute instances delete ch06-instance-1 --keep-disks=boot B. gcloud compute instances delete ch06-instance-1 --save-disks=boot C. gcloud compute instances delete ch06-instance-1 --keep-disks=filesystem D. gcloud compute delete ch06-instance-1 --keep-disks=filesystem

A. gcloud compute instances delete ch06-instance-1 --keep-disks=boot

The command to create a VPC from the command line is: A. gcloud compute networks create B. gcloud networks vpc create C. gsutil networks vpc create D. gcloud compute create networks

A. gcloud compute networks create

What command is used to list container images in the command line? A. gcloud container images list B. gcloud container list images C. kubectl list container images D. kubectl container list images

A. gcloud container images list

As part of a compliance regimen, your team is required to back up data from your Datastore database to an object storage system. Your data is stored in the default namespace. What command would you use to export the default namespace from Datastore to a bucket called ace-exam-bucket1? A. gcloud datastore export --namespaces="(default)" gs://ace-exam-bucket1 B. gcloud datastore export --namespaces="(default)" ace-exam-bucket1 C. gcloud datastore dump --namespaces="(default)" gs://ace-exam-bucket1 D. gcloud datastore dump --namespaces="(default)" ace-exam-bucket1

A. gcloud datastore export --namespaces="(default)" gs://ace-exam-bucket1

What command launches a deployment? A. gcloud deployment-manager deployments create B. gcloud cloud-launcher deployments create C. gcloud deployment-manager deployments launch D. gcloud cloud-launcher deployments launch

A. gcloud deployment-manager deployments create

You'd like to stop using a cloud function and delete it from your project. Which command would you use from the command line to delete a cloud function? A. gcloud functions delete B. gcloud components function delete C. gcloud components delete D. gcloud delete functions

A. gcloud functions delete

The correct command to create a Pub/Sub topic is which of the following? A. gcloud pubsub topics create B. gcloud pubsub create topics C. bq pubsub create topics D. cbt pubsub topics create

A. gcloud pubsub topics create

Which of the following commands is used to create a backup of a Cloud SQL database? A. gcloud sql backups create B. gsutil sql backups create C. gcloud sql create backups D. gcloud sql backups export

A. gcloud sql backups create

Which of the following commands will run an automatic backup at 3:00 a.m. on an instance called ace-exam-mysql? A. gcloud sql instances patch ace-exam-mysql --backup-start-time 03:00 B. gcloud sql databases patch ace-exam-mysql --backup-start-time 03:00 C. cbt sql instances patch ace-exam-mysql --backup-start-time 03:00 D. bq gcloud sql instances patch ace-exam-mysql --backup-start-time 03:00

A. gcloud sql instances patch ace-exam-mysql --backup-start-time 03:00

You want to create a cloud function to transform audio files into different formats. The audio files will be uploaded into Cloud Storage. You want to start transformations as soon as the files finish uploading. Which trigger would you specify in the cloud function to cause it to execute after the file is uploaded? A. google.storage.object.finalize B. google.storage.object.upload C. google.storage.object.archive D. google.storage.object.metadataUpdate

A. google.storage.object.finalize

You are concerned that as users make connections to your application, the performance will degrade. You want to make sure that more instances are added to your App Engine application when there are more than 20 concurrent requests. What parameter would you specify in app.yaml? A. max_concurrent_requests B. target_throughput_utilization C. max_instances D. max_pending_latency

A. max_concurrent_requests

When an action occurs in GCP, such as a file being written to Cloud Storage or a message being added to a Cloud Pub/Sub topic, that action is called what? A. An incident B. An event C. A trigger D. A log entry

B. An event

A new engineer is trying to set up alerts for a Kubernetes cluster. The engineer seems to be creating a large number of alerts and you are concerned this is not the most efficient way and will lead to more maintenance work than required. You explain that a more efficient way is to create alerts and apply them to what? A. One instance only B. An instance or entire group C. A group only D. A pod

B. An instance or entire group

What actions are available from the Actions menu when viewing deployment details? A. Scale and Autoscale only B. Autoscale, Expose, and Rolling Update C. Add, Modify, and Delete D. None of the above

B. Autoscale, Expose, and Rolling Update

You are working with a startup developing analytics software for IoT data. You have to be able to ingest large volumes of data consistently and store it for several months. The startup has several applications that will need to query this data. Volumes are expected to grow to petabyte volumes. Which database should you use? A. Cloud Spanner B. Bigtable C. BigQuery D. Datastore

B. Bigtable

You are contacted by the finance department of your company for advice on how to automate payments for GCP services. What kind of account would you recommend setting up? A. Service account B. Billing account C. Resource account D. Credit account

B. Billing account

You believe there may be a problem with BigQuery in the us-central zone. Where would you go to check the status of the BigQuery service for the quickest access to details? A. Email Google Cloud Support. B. Check https://status.cloud.google.com/. C. Check https://bigquery.status.cloud.google.com/. D. Call Google tech support.

B. Check https://status.cloud.google.com/.

When specifying a Cloud Storage cloud function, you have to specify an event type, such as finalize, delete, or archive. When specifying a Cloud Pub/Sub cloud function, you do not have to specify an event type. Why is this the case? A. Cloud Pub/Sub does not have triggers for event types. B. Cloud Pub/Sub has triggers on only one event type, when a message is published. C. Cloud Pub/Sub determines the correct event type by analyzing the function code. D. The statement in the question is incorrect; you do have to specify an event type with Cloud Pub/Sub functions.

B. Cloud Pub/Sub has triggers on only one event type, when a message is published.

You have developed an application that calls a service running in a Kubernetes cluster. The service runs in pods that can be terminated if they are unhealthy and replaced with other pods that might have a different IP address. How should you code your application to ensure it functions properly in this situation? A. Query Kubernetes for a list of IP addresses of pods running the service you use. B. Communicate with Kubernetes services so applications do not have to be coupled to specific pods. C. Query Kubernetes for a list of pods running the service you use. D. Use a gcloud command to get the IP addresses needed.

B. Communicate with Kubernetes services so applications do not have to be coupled to specific pods.

When creating an alerting policy, what can be specified? A. Conditions, notifications, and time to live B. Conditions, notifications, and documentation C. Conditions only D. Conditions, documentation, and time to live

B. Conditions, notifications, and documentation

You have acquired a 10 GB data set from a third-party research firm. A group of data scientists would like to access this data from their statistics programs written in R. R works well with Linux and Windows file systems, and the data scientists are familiar with file operations in R. The data scientists would each like to have their own dedicated VM with the data available in the VM's file system. What is a way to make this data readily available on a VM and minimize the steps the data scientists will have to take? A. Store the data in Cloud Storage. B. Create VMs using a source image created from a disk with the data on it. C. Store the data in Google Drive. D. Load the data into BigQuery.

B. Create VMs using a source image created from a disk with the data on it.

You have just created a Cloud Spanner instance. You have been tasked with creating a way to store data about a product catalog. What is the next step after creating a Cloud Spanner instance that you would perform to enable you to load data? A. Run gcloud spanner update-security-patches. B. Create a database within the instance. C. Create tables to hold the data. D. Use the Cloud Spanner console to import data into tables created with the instance.

B. Create a database within the instance.

You need to store log entries for a longer period of time than Stackdriver Logging retains them. What is the best option for preserving log data? A. There is no option; once the data retention period passes, Stackdriver Logging deletes the data. B. Create a log sink and export the log data using Stackdriver Logging's export functionality. C. Write a Python script to use the Stackdriver API to write the data to Cloud Storage. D. Write a Python script to use the Stackdriver API to write the data to BigQuery.

B. Create a log sink and export the log data using Stackdriver Logging's export functionality.

Which specialized services are most likely to be used to build a data warehousing platform that requires complex extraction, transformation, and loading operations on batch data as well as processing streaming data? A. Apigee API platform B. Data analytics C. AI and machine learning D. Cloud SDK

B. Data analytics

You have set up a Cloud Spanner process to export data to Cloud Storage. You notice that each time the process runs you incur charges for another GCP service, which you think is related to the export process. What other GCP service might be incurring charges during the Cloud Spanner export? A. Dataproc B. Dataflow C. Datastore D. bq

B. Dataflow

A team of mobile developers is developing a new application. It will require synchronizing data between mobile devices and a backend database. Which database service would you recommend? A. BigQuery B. Firestore C. Spanner D. Bigtable

B. Firestore

Where do you specify the ports on a TCP Proxy load balancer that should have their traffic forwarded? A. Backend B. Frontend C. Network Services section D. VPC

B. Frontend

What two components need to be configured when creating a TCP Proxy load balancer? A. Frontend and forwarding rule B. Frontend and backend C. Forwarding rule and backend only D. Backend and forwarding rule only

B. Frontend and backend

What is the name of the cookie used by App Engine when cookie-based splitting is used? A. GOOGID B. GOOGAPPUID C. APPUID D. UIDAPP

B. GOOGAPPUID

You are creating a set of persistent disks to store data for exploratory data analysis. The disks will be mounted on a virtual machine in the us-west2-a zone. The data is historical data retrieved from Cloud Storage. The data analysts do not need peak performance and are more concerned about cost than performance. The data will be stored in a local relational database. Which type of storage would you recommend? A. SSDs B. HDDs C. Datastore D. Bigtable

B. HDDs

An auditor needs to review audit logs. You assign read-only permission to a custom role you create for auditors. What security best practice are you following? A. Defense in depth B. Least privilege C. Separation of duties D. Vulnerability scanning

B. Least privilege

Which of the following statements about Cloud Storage is not true? A. Cloud Storage buckets can have retention periods. B. Lifecycle configurations can be used to change storage class from regional to multiregional. C. Cloud Storage does not provide block-level access to data within files stored in buckets. D. Cloud Storage is designed for high durability.

B. Lifecycle configurations can be used to change storage class from regional to multiregional.

What is the other name of Cloud Launcher? A. Cloud Deployment Manager B. Marketplace C. Cloud Tools D. Cloud Solutions: Third Party

B. Marketplace

You have been asked to deploy a cloud function to work with Cloud Pub/Sub. As you review the Python code, you notice a reference to a Python function called base64.b64decode. Why would a decode function be required in a Pub/Sub cloud function? A. It's not required and should not be there. B. Messages in Pub/Sub topics are encoded to allow binary data to be used in places where text data is expected. Messages need to be decoded to access the data in the message. C. It is required to add padding characters to the end of the message to make all messages the same length. D. The decode function maps data from a dictionary data structure to a list data structure.

B. Messages in Pub/Sub topics are encoded to allow binary data to be used in places where text data is expected. Messages need to be decoded to access the data in the message.

What Stackdriver service is used to generate alerts when the CPU utilization of a VM exceeds 80 percent? A. Logging B. Monitoring C. Cloud Trace D. Cloud Debug

B. Monitoring

You want to use Cloud Launcher to deploy a WordPress site. You notice there is more than one WordPress option. Why is that? A. It's a mistake. Submit a ticket to Google support. B. Multiple vendors may offer the same application. C. It's a mistake. Submit a ticket to the vendors. D. You will never see such an option.

B. Multiple vendors may offer the same application.

You are deploying a high availability application in Kubernetes Engine. You want to maintain availability even if there is a major network outage in a data center. What feature of Kubernetes Engine would you employ? A. Multiple instance groups B. Multizone/region cluster C. Regional deployments D. Load balancing

B. Multizone/region cluster

Which runtimes are supported in Cloud Functions? A. Node.js 5, Node.js 6, and Node.js 8 B. Node.js 8, Python, and Go C. Node.js 6, Node.js 8, and Python D. Node.js 8, Python, and Go

B. Node.js 8, Python, and Go [the book says C is correct, but this is out of date. also yes, B and D are the same...]

When using Kubernetes Engine, which of the following might a cloud engineer need to configure? A. Nodes, pods, services, and clusters only B. Nodes, pods, services, clusters, and container images C. Nodes, pods, clusters, and container images only D. Pods, services, clusters, and container images only

B. Nodes, pods, services, clusters, and container images

You want to create a custom metric for use in Stackdriver Monitoring but do not want to use the low-level Stackdriver API. What is an alternative open source option for working with custom metrics? A. Prometheus B. OpenCensus C. Grafana D. Nagios

B. OpenCensus

A developer intern is confused about what roles are used for. You describe IAM roles as a collection of what? A. Identities B. Permissions C. Access control lists D. Audit logs

B. Permissions

You plan to develop a web application using products from the GCP that already include established roles for managing permissions such as read-only access or the ability to delete old versions. Which of the following roles offers these capabilities? A. Primitive roles B. Predefined roles C. Custom roles D. Application roles

B. Predefined roles

You have noticed unusually slow response time when issuing commands to a Linux server, and you decide to reboot the machine. Which command would you use in the console to reboot? A. Reboot B. Reset C. Restart D. Shutdown followed by Startup

B. Reset

What options are available for filtering log messages when viewing audit logs? A. Period time and log level only B. Resource, type of log, log level, and period of time only C. Resource and period of time only D. Type of log only

B. Resource, type of log, log level, and period of time only

A Deployment Manager configuration file starts with what term? A. Deploy B. Resources C. Properties D. YAML

B. Resources

A data warehouse designer wants to deploy an extraction, transformation, and load process to Kubernetes. The designer provided you with a list of libraries that should be installed, including drivers for GPUs. You have a number of container images that you think may meet the requirements. How could you get a detailed description of each of those containers? A. Run the command gcloud container images list details. B. Run the command gcloud container images describe. C. Run the command gcloud image describe. D. Run the command gcloud container describe.

B. Run the command gcloud container images describe.

You have just created an Ubuntu VM and want to log into the VM to install some software packages. Which network service would you use to access the VM? A. FTP B. SSH C. RDP D. ipconfig

B. SSH

You are designing an application that uses a series of services to transform data from its original form into a format suitable for use in a data warehouse. Your transformation application will write to the message queue as it processes each input file. You don't want to give users permission to write to the message queue. You could allow the application to write to the message queue by using which of the following? A. Billing account B. Service account C. Messaging account D. Folder

B. Service account

What objects in GCP are sometimes treated as resources and sometimes as identities? A. Billing accounts B. Service accounts C. Projects D. Roles

B. Service accounts

You need to set up a server with a high level of security. You want to be prepared in case of attacks on your server by someone trying to inject a rootkit (a kind of malware that can alter the operating system). Which option should you select when creating a VM? A. Firewall B. Shield VM C. Project-wide SSH keys D. Boot disk integrity check

B. Shield VM

Why do you need to specify the operating system to be used when estimating the cost of a VM? A. All operating systems are charged a fixed rate. B. Some operating systems incur a cost. C. It's not necessary; it is only included for documentation. D. To estimate the cost of Bring Your Own License configurations.

B. Some operating systems incur a cost.

Cloud Dataproc is a managed service for which two big data platforms? A. Spark and Cassandra B. Spark and Hadoop C. Hadoop and Cassandra D. Spark and TensorFlow

B. Spark and Hadoop

You want to limit traffic to a set of instances. You decide to set a specific network tag on each instance. What part of a firewall rule can reference the network tag to determine the set of instances affected by the rule? A. Action B. Target C. Priority D. Direction

B. Target

You view a list of Linux VM instances in the console. All have public IP addresses assigned. You notice that the SSH option is disabled for one of the instances. Why might that be the case? A. The instance is preemptible and therefore does not support SSH. B. The instance is stopped. C. The instance was configured with the No SSH option. D. The SSH option is never disabled.

B. The instance is stopped.

A user prefers services that require minimal setup; why would you recommend Cloud Storage, App Engine, and Cloud Functions? A. They are charged only by time. B. They are serverless. C. They require a user to configure VMs. D. They can only run applications written in Go.

B. They are serverless.

Why are primitive roles classified in a category in addition to IAM? A. They are part of IAM. B. They were created before IAM. C. They were created after IAM. D. They are not related to access control.

B. They were created before IAM.

An architect is moving a legacy application to Google Cloud and wants to minimize the changes to the existing architecture while administering the cluster as a single entity. The legacy application runs on a load-balanced cluster that runs nodes with two different configurations. The two configurations are required because of design decisions made several years ago. The load on the application is fairly consistent, so there is rarely a need to scale up or down. What GCP Compute Engine resource would you recommended using? A. Preemptible instances B. Unmanaged instance groups C. Managed instance groups D. GPUs

B. Unmanaged instance groups

Data scientists in your company want to use a machine learning library available only in Apache Spark. They want to minimize the amount of administration and DevOps work. How would you recommend they proceed? A. Use Cloud Spark B. Use Cloud Dataproc C. Use BigQuery D. Install Apache Spark on a cluster of VMs

B. Use Cloud Dataproc

11. You have to run a number of services to support an application. Which of the following is a good deployment model? A. Run on a large, single VM B. Use containers in a managed cluster C. Use two large VMs, making one of them read only D. Use a small VM for all services and increase the size of the VM when CPU utilization exceeds 90 percent

B. Use containers in a managed cluster

You want to quickly identify the set of operating systems available in Cloud Launcher. Which of these steps would help with that? A. Use Google Search to search the Web for a listing. B. Use filters in Cloud Launcher. C. Scroll through the list of solutions displayed on the start page of Cloud Launcher. D. It is not possible to filter to operating systems.

B. Use filters in Cloud Launcher.

You are tasked with mapping the authentication and authorization policies of your on-premises applications to GCP's authentication and authorization mechanisms. The GCP documentation states that an identity must be authenticated in order to grant privileges to that identity. What does the term identity refer to? A. VM ID B. User C. Role D. Set of privileges

B. User

A DevOps engineer is confused about the purpose of scopes. Scopes are access controls that are applied to what kind of resources? A. Storage buckets B. VM instances C. Persistent disks D. Subnets

B. VM instances

A health check is used to check what resources? A. Load balancer B. VMs C. Storage buckets D. Persistent disks

B. VMs [I think this is a badly phrased question, you are checking the health of the load balancer but the 'resources' are the VMs]

You have designed a microservice that you want to deploy to production. Before it can be deployed, you have to review how you will manage the service lifecycle. The architect is particularly concerned about how you will deploy updates to the service with minimal disruption. What aspect of App Engine components would you use to minimize disruptions during updates to the service? A. Services B. Versions C. Instance groups D. Instances

B. Versions

What gcloud command would you use to set scopes? A. gcloud compute instances set-scopes B. gcloud compute instances set-service-account C. gcloud compute service-accounts set-scopes D. gcloud compute service-accounts define-scopes

B. gcloud compute instances set-service-account

When you first try to use the kubectl command, you get an error message indicating that the resource cannot be found or you cannot connect to the cluster. What command would you use to try to eliminate the error? A. gcloud container clusters access B. gcloud container clusters get-credentials C. gcloud auth container D. gcloud auth container clusters

B. gcloud container clusters get-credentials

You have been assigned to help diagnose performance problems with applications running on several Kubernetes clusters. The first thing you want to do is understand, at a high level, the characteristics of the clusters. Which command should you use? A. gcloud container list B. gcloud container clusters list C. gcloud clusters list D. None of the above

B. gcloud container clusters list

Your department has been asked to analyze large batches of data every night. The jobs will run for about three to four hours. You want to shut down resources as soon as the analysis is done, so you decide to write a script to create a Dataproc cluster every night at midnight. What command would you use to create a cluster called spark-nightly-analysis in the us-west2-a zone? A. bq dataproc clusters create spark-nightly-analysis --zone us-west2-a B. gcloud dataproc clusters create spark-nightly-analysis --zone us-west2-a C. gcloud dataproc clusters spark-nightly-analysis --zone us-west2-a D. None of the above

B. gcloud dataproc clusters create spark-nightly-analysis --zone us-west2-a

What command is used to create a DNS zone in the command line? A. gsutil dns managed-zones create B. gcloud dns managed-zones create C. gcloud beta managed-zones create D. gcloud beta dns create managed zones

B. gcloud dns managed-zones create

The gcloud command to create a custom role is what? A. gcloud project roles create B. gcloud iam roles create C. gcloud project create roles D. gcloud iam create roles

B. gcloud iam roles create

You need to copy files from your local device to a bucket in Cloud Storage. What command would you use? Assume you have Cloud SDK installed on your local computer. A. gsutil copy B. gsutil cp C. gcloud cp D. gcloud storage objects copy

B. gsutil cp

You want to rename an object stored in a bucket. What command structure would you use? A. gsutil cp gs://[BUCKET_NAME]/[OLD_OBJECT_NAME] gs://[BUCKET_NAME]/ [NEW_OBJECT_NAME] B. gsutil mv gs://[BUCKET_NAME]/[OLD_OBJECT_NAME] gs://[BUCKET_NAME]/ [NEW_OBJECT_NAME] C. gsutil mv gs://[OLD_OBJECT_NAME] gs://[NEW_OBJECT_NAME] D. gcloud mv gs://[OLD_OBJECT_NAME] gs://[NEW_OBJECT_NAME]

B. gsutil mv gs://[BUCKET_NAME]/[OLD_OBJECT_NAME] gs://[BUCKET_NAME]/ [NEW_OBJECT_NAME]

When you enter a query into the BigQuery query form, BigQuery analyzes the query and displays an estimate of what metric? A. Time required to enter the query B. Cost of the query C. Amount of data scanned D. Number of bytes passed between servers in the BigQuery cluster

C. Amount of data scanned

A product manager is proposing a new application that will require several backend services, three business logic services, and access to relational databases. Each service will provide a single function, and it will require several of these services to complete a business task. Service execution time is dependent on the size of input and is expected to take up to 30 minutes in some cases. Which GCP product is a good serverless option for running this related service? A. Cloud Functions B. Compute Engine C. App Engine D. Cloud Storage

C. App Engine

You have a Python application you'd like to run in a scalable environment with the least amount of management overhead. Which GCP product would you select? A. App Engine flexible environment B. Cloud Engine C. App Engine standard environment D. Kubernetes Engine

C. App Engine standard environment

You want to estimate the cost of running a BigQuery query. What two services within Google Cloud Platform will you need to use? A. BigQuery and Billing B. Billing and Pricing Calculator C. BigQuery and Pricing Calculator D. Billing and Pricing Calculator

C. BigQuery and Pricing Calculator

All of the following parameters can be set when adding an additional disk through Google Cloud Console, except one. Which one? A. Disk type B. Encryption key management C. Block size D. Source image for the disk

C. Block size

You are deploying a new relational database to support a web application. Which type of storage system would you use to store data files of the database? A. Object storage B. Data storage C. Block storage D. Cache

C. Block storage

An engineer recently joined your team and is not aware of your team's standards for creating clusters and other Kubernetes objects. In particular, the engineer has not properly labeled several clusters. You want to modify the labels on the cluster from Cloud Console. How would you do it? A. Click the Connect button. B. Click the Deploy menu option. C. Click the Edit menu option. D. Type the new labels in the Labels section.

C. Click the Edit menu option.

You are planning to deploy a SaaS application for customers in North America, Europe, and Asia. To maintain scalability, you will need to distribute workload across servers in multiple regions. Which GCP service would you use to implement the workload distribution? A. Cloud DNS B. Cloud Spanner C. Cloud Load Balancing D. Cloud CDN

C. Cloud Load Balancing

A client is developing an application that will need to analyze large volumes of text information. The client is not expert in text mining or working with language. What GCP service would you recommend they use? A. Cloud Vision B. Cloud ML C. Cloud Natural Language Processing D. Cloud Text Miner

C. Cloud Natural Language Processing

Your software team is developing a distributed application and wants to send messages from one application to another. Once the consuming application reads a message, it should be deleted. You want your system to be robust to failure, so messages should be available for at least three days before they are discarded. Which GCP service is best designed to support this use case? A. Bigtable B. Dataproc C. Cloud Pub/Sub D. Cloud Spanner

C. Cloud Pub/Sub

You have just exported from a Dataproc cluster. What have you exported? A. Data in Spark DataFrames B. All tables in the Spark database C. Configuration data about the cluster D. All tables in the Hadoop database

C. Configuration data about the cluster

You have used Cloud Launcher to deploy a WordPress site and would now like to deploy a database. You notice that the configuration form for the databases is different from the form used with WordPress. Why is that? A. It's a mistake. Submit a ticket to Google support. B. You've navigated to a different subform of Cloud Launcher. C. Configuration properties are based on the application you are deploying and will be different depending on what application you are deploying. D. This cannot happen.

C. Configuration properties are based on the application you are deploying and will be different depending on what application you are deploying.

What service is responsible for managing container images? A. Kubernetes Engine B. Compute Engine C. Container Registry D. Container Engine

C. Container Registry

Cloud SQL is a fully managed relational database service, but database administrators still have to perform some tasks. Which of the following tasks do Cloud SQL users need to perform? A. Applying security patches B. Performing regularly scheduled backups C. Creating databases D. Tuning the operating system to optimize Cloud SQL performance

C. Creating databases

An HTTP trigger can be invoked by making a request using which of the following? A. GET only B. POST and GET only C. DELETE, POST, and GET D. DELETE, POST, REVISE, and GET

C. DELETE, POST, and GET

A team of data scientists has requested access to data stored in Bigtable so that they can train machine learning models. They explain that Bigtable does not have the features required to build machine learning models. Which of the following GCP services are they most likely to use to build machine learning models? A. Datastore B. Dataflow C. Dataproc D. DataAnalyze

C. Dataproc

The latest version of your microservice code has been approved by your manager, but the product owner does not want the new features released until a press release is published. You'd like to get the code out but not expose it to customers. What is the best way to get the code out as soon as possible without exposing it to customers? A. Deploy with gcloud app deploy --no-traffic. B. Write a cron job to deploy after the press release is published. C. Deploy with gcloud app deploy --no-promote. D. Deploy as normal after the press release is published.

C. Deploy with gcloud app deploy --no-promote.

What kind of information is provided in the Details page about an instance in Stackdriver? A. CPU usage only B. Network traffic only C. Disk I/O, CPU usage, and network traffic D. CPU usage and disk I/O

C. Disk I/O, CPU usage, and network traffic

The source of an image may be: A. Only disks B. Snapshots or disks only C. Disks, snapshots, or another image D. Disks, snapshots, or any database export file

C. Disks, snapshots, or another image

You work for a retailer with a large number of brick and mortar stores. Every night the stores upload daily sales data. You have been tasked with creating a service that verifies the uploads every night. You decide to use a service account. Your manager questions the security of your proposed solution, particularly about authenticating the service account. You explain the authentication mechanism used by service accounts. What authentication mechanism is used? A. Username and password B. Two-factor authentication C. Encrypted keys D. Biometrics

C. Encrypted keys

You are tasked with designing a function to execute in Cloud Functions. The function will need more than the default amount of memory and should be applied only when a finalize event occurs after a file is uploaded to Cloud Storage. The function should only apply its logic to files with a standard image file type. Which of the following required features cannot be specified in a parameter and must be implemented in the function code? A. Cloud function name B. Memory allocated for the function C. File type to apply the function to D. Event type

C. File type to apply the function to

You have been asked to set up network security in a virtual private cloud. Your company wants to have multiple subnetworks and limit traffic between the subnetworks. Which network security control would you use to control the flow of traffic between subnets? A. Identity access management B. Router C. Firewall D. IP address table

C. Firewall

You want to create a VPN using Cloud Console. What section of Cloud Console should you use? A. Compute Engine B. App Engine C. Hybrid Connectivity D. IAM & Admin

C. Hybrid Connectivity

You have noticed that an application's performance has degraded significantly. You have recently made some configuration changes to resources in your Kubernetes cluster and suspect that those changes have alerted the number of pods running in the cluster. Where would you look for details on the number of pods that should be running? A. Deployments B. Stackdriver C. ReplicaSet D. Jobs

C. ReplicaSet

All of the following generate events that can be triggered using Cloud Functions, except which one? A. Cloud Storage B. Cloud Pub/Sub C. SSL D. Firebase

C. SSL

A team is setting up a web service for internal use. They want to use the same IP address for the foreseeable future. What type of IP address would you assign? A. Internal B. External C. Static D. Ephemeral

C. Static

Your company is launching an IoT service and will receive large volumes of streaming data. You have to store this data in Bigtable. You want to explore the Bigtable environment from the command line. What command would you run to ensure you have command-line tools installed? A. apt-get install bigtable-tools B. apt-get install cbt C. gcloud components install cbt D. gcloud components install bigtable-tools

C. gcloud components install cbt

Which command will delete an instance named ch06-instance-3? A. gcloud compute instances delete instance=ch06-instance-3 B. gcloud compute instance stop ch06-instance-3 C. gcloud compute instances delete ch06-instance-3 D. gcloud compute delete ch06-instance-3

C. gcloud compute instances delete ch06-instance-3

You want to generate a list of VMs in your inventory and have the results in JSON format. What command would you use? A. gcloud compute instances list B. gcloud compute instances describe C. gcloud compute instances list --format json D. gcloud compute instances list --output json

C. gcloud compute instances list --format json

Which of the following commands will stop a VM named web-server-1? A. gcloud compute instances halt web-server-1 B. gcloud compute instances --terminate web-server1 C. gcloud compute instances stop web-server-1 D. gcloud compute stop web-server-1

C. gcloud compute instances stop web-server-1

What gcloud command will create a cluster named ch07-cluster-1 with four nodes? A. gcloud beta container clusters create ch07-cluster-1 --num-nodes=4 B. gcloud container beta clusters create ch07-cluster-1 --num-nodes=4 C. gcloud container clusters create ch07-cluster-1 --num-nodes=4 D. gcloud beta container clusters create ch07-cluster-1 4

C. gcloud container clusters create ch07-cluster-1 --num-nodes=4 [book says A but 'beta' is out of date, so C is correct]

What is the correct command-line structure to export data from Datastore? A. gcloud datastore export '[NAMESPACE]' gs://[BUCKET_NAME] B. gcloud datastore export gs://[BUCKET_NAME] C. gcloud datastore export --namespaces='[NAMESPACE]' gs://[BUCKET_NAME] D. gcloud datastore dump --namespaces='[NAMESPACE]' gs://[BUCKET_NAME]

C. gcloud datastore export --namespaces='[NAMESPACE]' gs://[BUCKET_NAME]

A DevOps engineer is noticing a spike in CPU utilization on your servers. You explain you have just launched a deployment. You'd like to show the DevOps engineer the details of a deployment you just launched. What command would you use? A. gcloud cloud-launcher deployments describe B. gcloud deployment-manager deployments list C. gcloud deployment-manager deployments describe D. gcloud cloud-launcher deployments list

C. gcloud deployment-manager deployments describe

Which of these commands will deploy a Python cloud function called pub_sub_function_test? A. gcloud functions deploy pub_sub_function_test B. gcloud functions deploy pub_sub_function_test --runtime python37 C. gcloud functions deploy pub_sub_function_test --runtime python37 --trigger-topic gcp-ace-exam-test-topic D. gcloud functions deploy pub_sub_function_test --runtime python --trigger-topic gcp-ace-exam-test-topic

C. gcloud functions deploy pub_sub_function_test --runtime python37 --trigger-topic gcp-ace-exam-test-topic

You want to list roles assigned to users in a project called ace-exam-project. What gcloud command would you use? A. gcloud iam get-iam-policy ace-exam-project B. gcloud projects list ace-exam-project C. gcloud projects get-iam-policy ace-exam-project D. gcloud iam list ace-exam-project

C. gcloud projects get-iam-policy ace-exam-project

Which of the following commands will create a subscription on the topic ace-exam-topic1? A. gcloud pubsub create --topic=ace-exam-topic1 ace-exam-sub1 B. gcloud pubsub subscriptions create --topic=ace-exam-topic1 C. gcloud pubsub subscriptions create --topic=ace-exam-topic1 ace-exam-sub1 D. gsutil pubsub subscriptions create --topic=ace-exam-topic1 ace-exam-sub1

C. gcloud pubsub subscriptions create --topic=ace-exam-topic1 ace-exam-sub1

Which command will export a MySQL database called ace-exam-mysql1 to a file called ace-exam-mysql-export.sql in a bucket named ace-exam-buckete1? A. gcloud storage export sql ace-exam-mysql1 gs://ace-exam-buckete1/ace- exam-mysql-export.sql \ --database=mysql B. gcloud sql export ace-exam-mysql1 gs://ace-exam-buckete1/ace-exam- mysql-export.sql \ --database=mysql C. gcloud sql export sql ace-exam-mysql1 gs://ace-exam-buckete1/ace-exam- mysql-export.sql \ --database=mysql D. gcloud sql export sql ace-exam-mysql1 gs://ace-exam-mysql-export.sql/ ace-exam-buckete1/ \ --database=mysql

C. gcloud sql export sql ace-exam-mysql1 gs://ace-exam-buckete1/ace-exam- mysql-export.sql \ --database=mysql

What parameters can be configured with basic scaling? A. max_instances and min_instances B. idle_timeout and min_instances C. idle_timeout and max_instances D. idle_timeout and target_throughput_utilization

C. idle_timeout and max_instances

What is the command to list deployments from the command line? A. gcloud container clusters list-deployments B. gcloud container clusters list C. kubectl get deployments D. kubectl deployments list

C. kubectl get deployments

What command is used to run a Docker image on a cluster? A. gcloud container run B. gcloud beta container run C. kubectl run D. kubectl beta run

C. kubectl run

What command would you use to have 10 replicas of a deployment named ch07-app-deploy? A. kubectl upgrade deployment ch07-app-deploy --replicas=5 B. gcloud containers deployment ch07-app-deploy --replicas=5 C. kubectl scale deployment ch07-app-deploy --replicas=10 D. kubectl scale deployment ch07-app-deploy --pods=5

C. kubectl scale deployment ch07-app-deploy --replicas=10

You are defining a cloud function to write a record to a database when a file in Cloud Storage is archived. What parameters will you have to set when creating that function? A. runtime only B. trigger-resource only C. runtime, trigger-resource, trigger-event only D. runtime, trigger-resource, trigger-event, file-type

C. runtime, trigger-resource, trigger-event only

What are valid methods for splitting traffic? A. By IP address only B. By HTTP cookie only C. Randomly and by IP address only D. By IP address, HTTP cookies, and randomly

D. By IP address, HTTP cookies, and randomly

A software developer asks for your help exporting data from a Cloud SQL database. The developer tells you which database to export and which bucket to store the export file in, but hasn't mentioned which file format should be used for the export file. What are the options for the export file format? A. CSV and XML B. CSV and JSON C. JSON and SQL D. CSV and SQL

D. CSV and SQL

What are the categories of Cloud Launcher solutions? A. Data sets only B. Operating systems only C. Developer tools and operating systems only D. Data sets, operating systems, and developer tools

D. Data sets, operating systems, and developer tools

There is a bug in a microservice. You have reviewed application outputs but cannot identify the problem. You decide you need to step through the code. What Stackdriver service would you use to give you insight into the status of the services at particular points in execution? A. Monitoring B. Logging C. Trace D. Debug

D. Debug

What part of a firewall rule determines whether a rule applies to incoming or outgoing traffic? A. Action B. Target C. Priority D. Direction

D. Direction

A product manager at your company reports that customers are complaining about the reliability of one of your applications. The application is crashing periodically, but developers have not found a common pattern that triggers the crashes. They are concerned that they do not have good insight into the behavior of the application and want to perform a detailed review of all crash data. Which Stackdriver tool would you use to view consolidated crash information? A. Dataproc B. Monitoring C. Logging D. Error Reporting

D. Error Reporting

A product manager is considering a new set of features for an application that will require additional storage. What features of storage would you suggest the product manager consider? A. Read and write patterns only B. Cost only C. Consistency and cost only D. None of the above, they are all relevant considerations.

D. None of the above, they are all relevant considerations.

You plan to use Cloud Vision to analyze images and extract text seen in the image. You plan to process between 1,000 and 2,500 images per hour. How many VMs should you allocate to meet peak demand? A. 1 B. 10 C. 25 D. None; Cloud Vision is a serverless service.

D. None; Cloud Vision is a serverless service.

Stackdriver is used for what operations on Kubernetes clusters? A. Notifications only B. Monitoring and notifications only C. Logging only D. Notifications, monitoring, and logging

D. Notifications, monitoring, and logging

A large enterprise is planning to use GCP across a number of subdivisions. Each subdivision is managed independently and has its own budget. Most subdivisions plan to spend tens of thousands of dollars per month. How would you recommend they set up their billing account(s)? A. Use a single self-service billing account. B. Use multiple self-service billing accounts. C. Use a single invoiced billing account. D. Use multiple invoiced billing accounts.

D. Use multiple invoiced billing accounts.

How many organizations can you create in a resource hierarchy? A. 1 B. 2 C. 3 D. Unlimited

A. 1

How long can a cloud function run by default before timing out? A. 30 seconds B. 1 minute C. 9 minutes D. 20 minutes

B. 1 minute

What kind of data model is used by Datastore? A. Relational B. Document C. Wide-column D. Graph

B. Document

Before monitoring a Kubernetes cluster, what must you create with Stackdriver? A. Log B. Workspace C. Pod D. ReplicaSet

B. Workspace

What parameter is used to tell BigQuery to automatically detect the schema of a file on import? A. --autodetect B. --autoschema C. --detectschema D. --dry_run

A. --autodetect

You want to define a CIDR range that applies to all destination addresses. What IP address would you specify? A. 0.0.0.0/0 B. 10.0.0.0/8 C. 172.16.0.0/12 D. 192.168.0.0/16

A. 0.0.0.0/0

You have several App Engine apps you plan to deploy from your project. What have you failed to account for in this design? A. App Engine only supports one app per project. B. App Engine only supports two apps per project. C. App Engine apps exist outside of projects. D. Nothing, this is a common pattern.

A. App Engine only supports one app per project.

If you wanted to set the preemptible property using Cloud Console, in which section of the Create An Instance page would you find the option? A. Availability Policy B. Identity And API Access C. Sole Tenancy D. Networking

A. Availability Policy

The compression options deflate and snappy are available for what file types when exporting from BigQuery? A. Avro B. CSV C. XML D. Thrift

A. Avro

You have been tasked with creating a data warehouse for your company. It must support tens of petabytes of data and use SQL for a query language. Which managed database service would you choose? A. BigQuery B. Bigtable C. Cloud SQL D. SQL Server

A. BigQuery

You are deploying an API to the public Internet and are concerned that your service will be subject to DDoS attacks. Which GCP service should you consider to protect your API? A. Cloud Armor B. Cloud CDN C. Cloud IAM D. VPCs

A. Cloud Armor

An executive in your company emails you asking about creating a recommendation system that will help sell more products. The executive has heard there are some GCP solutions that may be good fits for this problem. What GCP service would you recommend the executive look into? A. Cloud Dataproc, especially Spark and its machine learning library B. Cloud Dataproc, especially Hadoop C. Cloud Spanner, which is a global relational database that can hold a lot of data D. Cloud SQL, because SQL is a powerful query language

A. Cloud Dataproc, especially Spark and its machine learning library

Which page in Google Cloud Console would you use to create a single instance of a VM? A. Compute Engine B. App Engine C. Kubernetes Engine D. Cloud Functions

A. Compute Engine

What are the two kinds of instances available in App Engine Standard? A. Resident and dynamic B. Persistent and dynamic C. Stable and dynamic D. Resident and nonresident

A. Resident and dynamic

When you navigate to IAM & Admin in Cloud Console, what appears in the main body of the page? A. Members and roles assigned B. Roles only C. Members only D. Roles and permissions assigned

A. Members and roles assigned

A software developer on your team is asking for your help improving the query performance of a database application. The developer is using a Cloud SQL MySQL, Second Generation instance. Which options would you recommend? A. Memorystore and SSD persistent disks B. Memorystore and HDD persistent disks C. Datastore and SSD persistent disks D. Datastore and HDD persistent disks

A. Memorystore and SSD persistent disks

A colleague is wondering why some storage charges are so high. They explain that they have moved all their storage to nearline and coldline storage. They routinely access most of the object on any given day. What is one possible reason the storage costs are higher than expected? A. Nearline and coldline incur access charges. B. Transfer charges. C. Multiregional coldline is more expensive. D. Regional coldline is more expensive.

A. Nearline and coldline incur access charges.

Cloud Filestore is based on what file system technology? A. Network File System (NFS) B. XFS C. EXT4 D. ReiserFS

A. Network File System (NFS)

You are using Cloud Console to create a VM that you want to exist in a custom subnet you just created. What section of the Create Instance form would you use to specify the custom subnet? A. Networking tab of the Management, Security, Disks, Networking, Sole Tenancy section B. Management tab of the Management, Security, Disks, Networking, Sole Tenancy section C. Sole Tenancy tab of Management, Security, Disks, Networking, Sole Tenancy D. Sole Tenancy tab of Management, Security, Disks, Networking

A. Networking tab of the Management, Security, Disks, Networking, Sole Tenancy section

You are configuring a load balancer and want to implement private load balancing. Which option would you select? A. Only Between My VMs B. Enable Private C. Disable Public D. Local Only

A. Only Between My VMs

Where do you navigate to launch a Cloud Launcher solution? A. Overview page of the solution B. Main Cloud Launcher page C. Network Services D. None of the above

A. Overview page of the solution

Your development team needs to be notified if there is a problem with applications running on several Kubernetes clusters. Different team members prefer different notification methods in addition to Stackdriver alerting. What is the most efficient way to send notifications and meet your team's requests? A. Set up SMS text messaging, Slack, and email notifications on an alert. B. Create a separate alert for each notification channel. C. Create alerts with email notifications and have those notification emails forwarded to other notification systems. D. Use a single third-party notification mechanism.

A. Set up SMS text messaging, Slack, and email notifications on an alert.

What is a one-time task you will need to complete before using the console? A. Set up billing B. Create a project C. Create a storage bucket D. Specify a default zone

A. Set up billing

You are attempting to execute commands to initiate a deployment on a Kubernetes cluster. The commands are not having any effect. You suspect that a Kubernetes component is not functioning correctly. What component could be the problem? A. The Kubernetes API B. A StatefulSet C. Cloud SDK gcloud commands D. ReplicaSet

A. The Kubernetes API

When you add a GPU to an instance, you must ensure that: A. The instance is set to terminate during maintenance. B. The instance is preemptible. C. The instance does not have nonboot disks attached. D. The instance is running Ubuntu 14.02 or later.

A. The instance is set to terminate during maintenance.

What do the TTL parameters specify in a DNS record? A. Time a record can exist in a cache before it should be queried again B. Time a client has to respond to a request for DNS information C. Time allowed to create a CNAME record D. Time before a human has to manually verify the information in the DNS record

A. Time a record can exist in a cache before it should be queried again

What is alert fatigue, and why is it a problem? A. Too many alert notifications are sent for events that do not require human intervention, and eventually DevOps engineers begin to pay less attention to notifications. B. Too many alerts put unnecessary load on your systems. C. Too few alerts leave DevOps engineers uncertain of the state of your applications and infrastructure. D. Too many false alerts

A. Too many alert notifications are sent for events that do not require human intervention, and eventually DevOps engineers begin to pay less attention to notifications.

You work for a startup, and costs are a major concern. You are willing to take a slight performance hit if it will save you money. How should you configure the scaling for your apps running in App Engine? A. Use dynamic instances by specifying autoscaling or basic scaling. B. Use resident instances by specifying autoscaling or basic scaling. C. Use dynamic instances by specifying manual scaling. D. Use resident instances by specifying manual scaling.

A. Use dynamic instances by specifying autoscaling or basic scaling.

You want to implement interproject communication between VPCs. Which feature of VPCs would you use to implement this? A. VPC peering B. Interproject peering C. VPN D. Interconnect

A. VPC peering

When setting up a network in GCP, your network the resources in it are treated as what? A. Virtual private cloud B. Subdomain C. Cluster D. None of the above

A. Virtual private cloud

You have received a large data set from an Internet of Things (IoT) system. You want to use BigQuery to analyze the data. What command-line command would you use to make data available for analysis in BigQuery? A. bq load --autodetect --source_format=[FORMAT] [DATASET].[TABLE] [PATH_TO_SOURCE] B. bq import --autodetect --source_format=[FORMAT] [DATASET].[TABLE] [PATH_TO_SOURCE] C. gcloud BigQuery load --autodetect --source_format=[FORMAT] [DATASET]. [TABLE] [PATH_TO_SOURCE] D. gcloud BigQuery load --autodetect --source_format=[FORMAT] [DATASET]. [TABLE] [PATH_TO_SOURCE]

A. bq load --autodetect --source_format=[FORMAT] [DATASET].[TABLE] [PATH_TO_SOURCE]

You need to create a table called iot-ingest-data in Bigtable. What command would you use? A. cbt createtable iot-ingest-data B. gcloud bigtable tables create ace-exam-bt-table C. gcloud bigtable create tables ace-exam-bt-table D. gcloud create ace-exam-bt-table

A. cbt createtable iot-ingest-data

You are using snapshots to save copies of a 100GB disk. You make a snapshot and then add 10GB of data. You create a second snapshot. How much storage is used in total for the two snapshots (assume no compression)? A. 210 GB, with 100GB for the first and 110GB for the second B. 110 GB, with 100GB for the first and 10GB for the second C. 110 GB, with 110 for the second (the first snapshot is deleted automatically) D. 221 GB, with 100GB for the first, 110GB for the second, plus 10 percent of the second snapshot (11 GB) for metadata overhead

B. 110 GB, with 100GB for the first and 10GB for the second

You have created a subnet called sn1 using 192.168.0.0. You want it to have 14 addresses. What prefix length would you use? A. 32 B. 28 C. 20 D. 16

B. 28

What is the maximum size of a Memorystore cache? A. 100GB B. 300GB C. 400GB D. 50GB

B. 300GB

What record type is used to specify the IPv4 address of a domain? A. AAAA B. A C. NS D. SOA

B. A

You would like to understand details of how GCP starts a virtual instance. Which optional parameter would you use when starting an instance to display those details? A. --verbose B. --async C. --describe D. --details

B. --async

You are using gcloud to create a firewall rule. Which parameter would you use to specify the subnet it should apply to? A. --subnet B. --network C. --destination D. --source-ranges

B. --network

What parameter to gcloud app services set-traffic is used to specify the method to use when splitting traffic? A. --split-traffic B. --split-by C. --traffic-split D. --split-method

B. --split-by [the book says A and this is wrong, as verified by the official documentation]

What parameter to gcloud app services set-traffic is used to specify the percentage of traffic that should go to each instance? A. --split-by B. --splits C. --split-percent D. --percent-split

B. --splits

What parameter is used to make a DNS zone private? A. --private B. --visibility=private C. --private=true D. --status=private

B. --visibility=private

What are the options for setting scopes in a VM? A. Allow Default Access and Allow Full Access only B. Allow Default Access, Allow Full Access, and Set Access for Each API C. Allow Full Access or Set Access For Each API only D. Allow Default Access and Set Access For Each API only

B. Allow Default Access, Allow Full Access, and Set Access for Each API

You would like to define as code the configuration of a set of application resources. The GCP service for creating resources using a configuration file made up of resource specifications defined in YAML syntax is called what? A. Compute Engine B. Deployment Manager C. Marketplace Manager D. Marketplace Deployer

B. Deployment Manager

You have built images using Ubuntu 14.04 and now want users to start using Ubuntu 16.04. You don't want to just delete images based on Ubuntu 14.04, but you want users to know they should start using Ubuntu 16.04. What feature of images would you use to accomplish this? A. Redirection B. Deprecated C. Unsupported D. Migration

B. Deprecated

The legal department needs to isolate its resources on its own VPC. You want to have network provide routing to any other service available on the global network. The VPC network has not learned global routes. What parameter may have been missed when creating the VPC subnets? A. DNS server policy B. Dynamic routing C. Static routing policy D. Systemic routing policy

B. Dynamic routing

You have deployed an application to a Kubernetes cluster that processes sensor data from a fleet of delivery vehicles. The volume of incoming data depends on the number of vehicles making deliveries. The number of vehicles making deliveries is dependent on the number of customer orders. Customer orders are high during daytime hours, holiday seasons, and when major advertising campaigns are run. You want to make sure you have enough nodes running to handle the load, but you want to keep your costs down. How should you configure your Kubernetes cluster? A. Deploy as many nodes as your budget allows. B. Enable autoscaling. C. Monitor CPU, disk, and network utilization and add nodes as necessary. D. Write a script to run gcloud commands to add and remove nodes when peaks usually start and end, respectively.

B. Enable autoscaling.

You want to list permissions in a role using Cloud Console. Where would you go to see that? A. IAM & Admin; select Roles. All permissions will be displayed. B. IAM & Admin; select Roles. Check the box next to a role to display the permissions in that role. C. IAM & Admin; select Audit Logs. D. IAM & Admin; select Service Accounts and then Roles.

B. IAM & Admin; select Roles. Check the box next to a role to display the permissions in that role.

What does IAM stand for? A. Identity and Authorization Management B. Identity and Access Management C. Identity and Auditing Management D. Individual Access Management

B. Identity and Access Management

Your company has a web application that allows job seekers to upload résumé files. Some files are in Microsoft Word, some are PDFs, and others are text files. You would like to store all résumés as PDFs. How could you do this in a way that minimizes the time between upload and conversion and with minimal amounts of coding? A. Write an App Engine application with multiple services to convert all documents to PDF. B. Implement a Cloud Function on Cloud Storage to execute on a finalize event. The function checks the file type, and if it is not PDF, the function calls a PDF converter function and writes the PDF version to the bucket that has the original. C. Add the names of all files to a Cloud Pub/Sub topic and have a batch job run at regular intervals to convert the original files to PDF. D. Implement a Cloud Function on Cloud Pub/Sub to execute on a finalize event. The function checks the file type, and if it is not PDF, the function calls a PDF converter function and writes the PDF version to the bucket that has the original.

B. Implement a Cloud Function on Cloud Storage to execute on a finalize event. The function checks the file type, and if it is not PDF, the function calls a PDF converter function and writes the PDF version to the bucket that has the original.

You are working in the form displayed after clicking the Add link in the IAM form of IAM & Admin in Cloud Console. There is a parameter called New Members. What items would you enter in that parameter? A. Individual users only B. Individual users or groups C. Roles or individual users D. Roles or groups

B. Individual users or groups

You have just created a virtual machine, and you'd like Stackdriver Monitoring to alert you via email whenever the CPU average utilization exceeds 75 percent for 5 minutes. What do you need to do to the VM to have this happen? A. Install a Stackdriver workspace B. Install the Stackdriver monitoring agent on the VM C. Edit the VM configuration in Cloud Console and check the Monitor With Stackdriver checkbox D. Set a notification channel

B. Install the Stackdriver monitoring agent on the VM

In the hierarchy of App Engine components, what is the lowest-level component? A. Application B. Instance C. Version D. Service

B. Instance

Before creating an instance group, you need to create what? A. Instances in the instance group B. Instance group template C. Boot disk image D. Source snapshot

B. Instance group template

You are deploying an application that will need to scale and be highly available. Which of these Compute Engine components will help achieve scalability and high availability? A. Preemptible instances B. Instance groups C. Cloud Storage D. GPUs

B. Instance groups

You have just created a deployment and want applications outside the cluster to have access to the services provided by the deployment. What do you need to do to the service? A. Give it a public IP address. B. Issue a kubectl expose deployment command. C. Issue a gcloud expose deployment command. D. Nothing, making it accessible must be done at the cluster level.

B. Issue a kubectl expose deployment command.

What is one of the direct advantages of using a message queue in distributed systems? A. It increases security. B. It decouples services, so if one lags, it does not cause other services to lag. C. It supports more programming languages. D. It stores messages until they are read by default.

B. It decouples services, so if one lags, it does not cause other services to lag.

You want to view a list of fields you can use to sort a list of instances. What command would you use to see the field names? A. gcloud compute instances list B. gcloud compute instances describe C. gcloud compute instances list --detailed D. gcloud compute instances describe --detailed

B. gcloud compute instances describe

Which of the following file formats is not an option for an export file when exporting from BigQuery? A. CSV B. XML C. Avro D. JSON

B. XML

Deployment configuration files created in Cloud Console use what type of file format? A. CSV B. YAML C. TSV D. JSON

B. YAML

You have a website hosted on a Compute Engine VM. Users can access the website using the domain name you provided. You do some maintenance work on the VM and stop the server and restart it. Now users cannot access the website. No other changes have occurred on the subnet. What might be the cause of the problem? A. The restart caused a change in the DNS record. B. You used an ephemeral instead of a static IP address. C. You do not have enough addresses available on your subnet. D. Your subnet has changed.

B. You used an ephemeral instead of a static IP address.

You have deployed a Django 1.5 Python application to App Engine. This version of Django requires Python 3. For some reason, App Engine is trying to run the application using Python 2. What file would you check and possibly modify to ensure that Python 3 is used with this application? A. app.config B. app.yaml C. services.yaml D. deploy.yaml

B. app.yaml

You want to get an estimate of the volume of data scanned by BigQuery from the command line. Which option shows the command structure you should use? A. gcloud BigQuery query estimate [SQL_QUERY] B. bq --location=[LOCATION] query --use_legacy_sql=false --dry_run [SQL_QUERY] C. gsutil --location=[LOCATION] query --use_legacy_sql=false --dry_run [SQL_QUERY] D. cbt BigQuery query estimate [SQL_QUERY]

B. bq --location=[LOCATION] query --use_legacy_sql=false --dry_run [SQL_QUERY]

You have just deployed an app that hosts services that provide the current time in any time zone. The project containing the code is called current-time-zone, the service providing the user interface is called time-zone-ui, and the service performing the calculation is called time-zone-calculate. What is the URL where a user could find your service? A. current-time-zone.appengine.com B. current-time-zone.appspot.com C. time-zone-ui.appspot.com D. time-zone-calculate.appspot.com

B. current-time-zone.appspot.com

What command should you use to deploy an App Engine app from the command line? A. gcloud components app deploy B. gcloud app deploy C. gcloud components instances deploy D. gcloud app instance deploy

B. gcloud app deploy

You have released a new version of a service. You have been waiting for approval from the product manager to start sending traffic to the new version. You get approval to route traffic to the new version. What parameter to gcloud app services set-traffic is used to specify that traffic should be moved to a newer version of the app? A. --move-to-new B. --migrate-to-new C. --migrate D. --move

C. --migrate

How long is log data stored in Stackdriver Logging? A. 7 days B. 15 days C. 30 days D. 60 days

C. 30 days

You have decided to deploy a set of microservices using containers. You could install and manage Docker on Compute Engine instances, but you'd rather have GCP provide some container management services. Which two GCP services allow you to run containers in a managed service? A. App Engine standard environment and App Engine flexible environment B. Kubernetes Engine and App Engine standard environment C. Kubernetes Engine and App Engine flexible environment D. App Engine standard environment and Cloud Functions

C. Kubernetes Engine and App Engine flexible environment

In the console, you can filter the list of VM instances by which of the following? A. Labels only B. Member of managed instance group only C. Labels, status, or members of managed instance group D. Labels and status only

C. Labels, status, or members of managed instance group

What can be the basis for scaling up an instance group? A. CPU utilization and operating system updates B. Disk usage and CPU utilization only C. Network latency, load balancing capacity, and CPU utilization D. Disk usage and operating system updates only

C. Network latency, load balancing capacity, and CPU utilization

At what levels of the resource hierarchy can a shared VPC be created? A. Folders and resources B. Organizations and project C. Organizations and folders D. Folders and subnets

C. Organizations and folders

The Cloud SQL service provides fully managed relational databases. What two types of databases are available in Cloud SQL? A. SQL Server and MySQL B. SQL Server and PostgreSQL C. PostgreSQL and MySQL D. MySQL and Oracle

C. PostgreSQL and MySQL

You want all your network traffic to route over the Google network and not traverse the public Internet. What level of network service should you choose? A. Standard B. Google-only C. Premium D. Non-Internet

C. Premium

You are generating an estimate of the cost of using BigQuery. One of the parameters is Query Pricing. You have to specify a value in TB units. What is the value you are specifying? A. The amount of data stored in BigQuery B. The amount of data returned by the query C. The amount of data scanned by the query D. The amount of data in Cloud Storage bucket

C. The amount of data scanned by the query

The runtime parameter in app.yaml is used to specify what? A. The script to execute B. The URL to access the application C. The language runtime environment D. The maximum time an application can run

C. The language runtime environment

A VM instance is trying to read from a Cloud Storage bucket. Reading the bucket is allowed by IAM roles granted to the service account of the VM. Reading buckets is denied by the scopes assigned to the VM. What will happen if the VM tries to read from the bucket? A. The application performing the read will skip over the read operation. B. The read will execute because the most permissive permission is allowed. C. The read will not execute because both scopes and IAM roles are applied to determine what operations can be performed. D. The read operation will succeed, but a message will be logged to Stackdriver Logging.

C. The read will not execute because both scopes and IAM roles are applied to determine what operations can be performed.

You have been asked to deploy a cloud function to reformat image files as soon as they are uploaded to Cloud Storage. You notice after a few hours that about 10 percent of the files are not processed correctly. After reviewing the files that failed, you realize they are all substantially larger than average. What could be the cause of the failures? A. There is a syntax error in the function code. B. The wrong runtime was selected. C. The timeout is too low to allow enough time to process large files. D. There is a permissions error on the Cloud Storage bucket containing the files.

C. The timeout is too low to allow enough time to process large files.

A new engineer is asking for clarification about when it is best to use Kubernetes and when to use instance groups. You point out that Kubernetes uses instance groups. What purpose do instance groups play in a Kubernetes cluster? A. They monitor the health of instances. B. They create pods and deployments. C. They create sets of VMs that can be managed as a unit. D. They create alerts and notification channels.

C. They create sets of VMs that can be managed as a unit.

When using Create Deployment from Cloud Console, which of the following cannot be specified for a deployment? A. Container image B. Application name C. Time to live (TTL) D. Initial command

C. Time to live (TTL)

Your manager asks you to set up a bare-bones Pub/Sub system as a sandbox for new devel- opers to learn about messaging systems. What are the two resources within Pub/Sub you will need to create? A. Topics and tables B. Topics and databases C. Topics and subscriptions D. Tables and subscriptions

C. Topics and subscriptions

What Stackdriver service is best for identifying where bottlenecks exist in your application? A. Monitoring B. Logging C. Trace D. Debug

C. Trace

You are migrating a large number of files from a local storage system to Cloud Storage. You want to use the Cloud Console instead of writing a script. Which of the following Cloud Storage operations can you perform in the console? A. Upload files only B. Upload folders only C. Upload files and folders D. Compare local files with files in the bucket using the diff command

C. Upload files and folders

You want to see a list of deployments. Which option from the Kubernetes Engine navigation menu would you select? A. Clusters B. Storage C. Workloads D. Deployments

C. Workloads

How much memory can be allocated to a Cloud Function? A. 128MB to 256MB B. 128MB to 512MB C. 128MB to 1GB D. 128MB to 2GB

D. 128MB to 2GB

You have a rule to allow inbound traffic to a VM. You want it to apply only if there is not another rule that would deny that traffic. What priority should you give this rule? A. 0 B. 1 C. 1000 D. 65535

D. 65535

You are viewing the details of a cluster in Cloud Console and want to see how many vCPUs are available in the cluster. Where would you look for that information? A. Node Pools section of the Cluster Details page B. Labels section of the Cluster Details page C. Summary line of the Cluster Listing page D. A and C

D. A and C

What properties may be set when defining a disk on a VM? A. A device name only B. A Boolean indicating a boot disk and a Boolean indicating autodelete C. A Boolean indicating autodelete only D. A device name, a Boolean indicating a boot disk, and a Boolean indicating autodelete

D. A device name, a Boolean indicating a boot disk, and a Boolean indicating autodelete

What are options for uploading code to a cloud function? A. Inline editor B. Zip upload C. Cloud source repository D. All of the above

D. All of the above

What features can you configure when running a Second Generation MySQL database in Cloud SQL? A. Machine type B. Maintenance windows C. Failover replicas D. All of the above

D. All of the above

What parameters of a deployment can be set in the Create Deployment page in Cloud Console? A. Container image B. Cluster name C. Application name D. All of the above

D. All of the above

You have been asked by your manager to deploy a WordPress site. You expect heavy traffic, and your manager wants to make sure the VM hosting the WordPress site has enough resources. Which resources can you configure when launching a WordPress site using Cloud Launcher? A. Machine type B. Disk type C. Disk size D. All of the above

D. All of the above

You receive a page in the middle of the night informing you that several services running on a Kubernetes cluster have high latency when responding to API requests. You review monitoring data and determine that there are not enough resources in the cluster to keep up with the load. You decide to add six more VMs to the cluster. What parameters will you need to specify when you issue the cluster resize command? A. Cluster size B. Cluster name C. Node pool name D. All of the above

D. All of the above

What launch stages are available when creating custom roles? A. Alpha and beta only B. General availability only C. Disabled only D. Alpha, beta, general availability, and disabled

D. Alpha, beta, general availability, and disabled

Which regional load balancer allows for load balancing based on IP protocol, address, and port? A. HTTP(S) B. SSL Proxy C. TCP Proxy D. Network TCP/UDP

D. Network TCP/UDP

You have created a Cloud Spanner instance and database. According to Google best practices, how often should you update VM packages using apt-get? A. Every 24 hours. B. Every 7 days. C. Every 30 days. D. Never, Cloud Spanner is a managed service.

D. Never, Cloud Spanner is a managed service.

Once a bucket has its storage class set to coldline, what are other storage classes it can transition to? A. Regional B. Nearline C. Multi-regional D. None of the above

D. None of the above

You are meeting with an auditor to discuss security practices in the cloud. The auditor asks how you implement several best practices. You describe how IAM predefined roles help to implement which security best practice(s)? A. Least privilege B. Separation of duties C. Defense in depth D. Options A and B

D. Options A and B

When you create a policy to notify you of a potential problem with your infrastructure, you can specify optional documentation. Why would you bother putting documentation in that form? A. It is saved to Cloud Storage for future use. B. It can help you or a colleague understand the purpose of the policy. C. It can contain information that would help someone diagnose and correct the problem. D. Options B and C.

D. Options B and C.

You want to use a template file with Deployment Manager. You expect the file to be complicated. What language would you use? A. Jinja2 B. Ruby C. Go D. Python

D. Python

You have been assigned the App Engine Deployer role. What operations can you perform? A. Write new versions of an application only B. Read application configuration and settings only C. Read application configuration and settings and write new configurations D. Read application configuration and settings and write new versions

D. Read application configuration and settings and write new versions

You are tasked with defining lifecycle configurations on buckets in Cloud Storage. You need to consider all possible options for transitioning from one storage class to another. All of the following transitions are allowed except for one. Which one is that? A. Nearline to coldline B. Regional to nearline C. Multiregional to coldline D. Regional to multiregional

D. Regional to multiregional

The status of what components can be viewed in the App Engine console? A. Services only B. Versions only C. Instances and versions D. Services, versions, and instances

D. Services, versions, and instances

You have created a subnet called sn1 using 192.168.0.0 with 65,534 addresses. You realize that you will not need that many addresses, and you'd like to reduce that number to 254. Which of the following commands would you use? A. gcloud compute networks subnets expand-ip-range sn1 --prefix-length=24 B. gcloud compute networks subnets expand-ip-range sn1 --prefix-length=-8 C. gcloud compute networks subnets expand-ip-range sn1 --size=256 D. There is no command to reduce the number of IP addresses available.

D. There is no command to reduce the number of IP addresses available.

What file format is used to define Deployment Manager configuration files? A. XML B. JSON C. CSV D. YAML

D. YAML

Which of the following file formats is not supported when importing data into BigQuery? A. CSV B. Parquet C. Avro D. YAML

D. YAML

You are using gcloud to create a VPN. Which command would you use? A. gcloud compute target-vpn-gateways only B. gcloud compute forwarding-rule and gcloud compute target-vpn-gateways only C. gcloud compute vpn-tunnels only D. gcloud compute forwarding-rule, gcloud compute target-vpn-gateways, and gcloud compute vpn-tunnels

D. gcloud compute forwarding-rule, gcloud compute target-vpn-gateways, and gcloud compute vpn-tunnels

Which of the following are used to define a resource in a Cloud Deployment Manager configuration file? A. type only B. properties only C. name and type only D. type, properties, and name

D. type, properties, and name

Kubernetes reserves CPU resources in percentage of cores available. The percentage is what range? A. 1 percent to 10 percent B. 0.25 percent to 6 percent C. 0.25 percent to 2 percent D. 10 percent to 12 percent

B. 0.25 percent to 6 percent

Investing in servers for extended periods of time, such as committing to use servers for three to five years, works well when? A. A company is just starting up B. A company can accurately predict server need for an extended period of time C. A company has a fixed IT budget D. A company has a variable IT budget

B. A company can accurately predict server need for an extended period of time

A colleague has asked for your assistance setting up a test environment in Google Cloud. They have never worked in GCP. You suggest starting with a single VM. Which of the following is the minimal set of information you will need? A. A name for the VM and a machine type B. A name for the VM, a machine type, a region, and a zone C. A name for the VM, a machine type, a region, a zone, and a CIDR block D. A name for the VM, a machine type, a region, a zone, and an IP address

B. A name for the VM, a machine type, a region, and a zone

The Network tab of the create VM form is where you would perform which of the following operations? A. Set the IP address of the VM B. Add a network interface to the VM C. Specify a default router D. Change firewall configuration rules

B. Add a network interface to the VM

You are reviewing a new GCP account created for use by the finance department. An auditor has questions about who can create projects by default. You explain who has privileges to create projects by default. Who is included? A. Only project administrators B. All users C. Only users without the role resourcemanager.projects.create D. Only billing account users

B. All users

You are deploying a Python web application to GCP. The application uses only custom code and basic Python libraries. You expect to have sporadic use of the application for the foreseeable future and want to minimize both the cost of running the application and the DevOps overhead of managing the application. Which computing service is the best option for running the application? A. Compute Engine B. App Engine standard environment C. App Engine flexible environment D. Kubernetes Engine

B. App Engine standard environment

You can specify packages to install into a Docker container by including commands in which file? A. Docker.cfg B. Dockerfile C. Config.dck D. install.cfg

B. Dockerfile

A newly hired cloud engineer is trying to understand what VMs are running in a particular project. How could the engineer get summary information on each VM running in a project? A. Execute the command gcloud compute list B. Execute the command gcloud compute instances list C. Execute the command gcloud instances list D. Execute the command gcloud list instances

B. Execute the command gcloud compute instances list

Kubernetes deployments can be in what states? A. Progressing, stalled, completed B. Progressing, completed, failed C. Progressing, stalled, failed, completed D. Progressing, stalled, running, failed, completed

B. Progressing, completed, failed

When using the Cloud SDK command-line interface, which of the following is part of commands for administering resources in Compute Engine? A. gcloud compute instances B. gcloud instances C. gcloud instances compute D. None of the above

A. gcloud compute instances

Which specialized service supports both batch and stream processing workflows? A. Cloud Dataproc B. BigQuery C. Cloud Datastore D. AutoML

A. Cloud Dataproc

You want to create a VM using the gcloud command. What parameter would you include to specify the type of boot disk? A. boot-disk-type B. boot-disk C. disk-type D. type-boot-disk

A. boot-disk-type

You are the lead developer on a medical application that uses patients' smartphones to capture biometric data. The app is required to collect data and store it on the smartphone when data cannot be reliably transmitted to the backend application. You want to minimize the amount of development you have to do to keep data synchronized between smartphones and backend data stores. Which data store option should you recommend? A. Cloud Firestore B. Cloud Spanner C. Cloud Datastore D. Cloud SQL

A. Cloud Firestore

A client of yours processes personal and health information for hospitals. All health information needs to be protected according to government regulations. Your client wants to move their application to Google Cloud but wants to use the encryption library that they have used in the past. You suggest that all VMs running the application have the encryption library installed. Which kind of image would you use for that? A. Custom image B. Public image C. CentOS 6 or 7

A. Custom image

Your manager is concerned about the rate at which the department is spending on cloud services. You suggest that your team use preemptible VMs for all of the following except which one? A. Database server B. Batch processing with no fixed time requirement to complete C. High-performance computing cluster D. None of the above

A. Database server

An application administrator is responsible for managing all resources in a project. She wants to delegate responsibility for several service accounts to another administrator. If additional service accounts are created, the other administrator should manage those as well. What is the best way to delegate privileges needed to manage the service accounts? A. Grant iam.serviceAccountUser to the administrator at the project level. B. Grant iam.serviceAccountUser to the administrator at the service account level. C. Grant iam.serviceProjectAccountUser to the administrator at the project level. D. Grant iam.serviceProjectAccountUser to the administrator at the service account level.

A. Grant iam.serviceAccountUser to the administrator at the project level.

Your company has a number of policies that need to be enforced for all projects. You decide to apply policies to the resource hierarchy. Not long after you apply the policies, an engineer finds that an application that had worked prior to implementing policies is no longer working. The engineer would like you to create an exception for the application. How can you override a policy inherited from another entity in the resource hierarchy? A. Inherited policies can be overridden by defining a policy at a folder or project level. B. Inherited policies cannot be overridden. C. Policies can be overridden by linking them to service accounts. D. Policies can be overridden by linking them to billing accounts.

A. Inherited policies can be overridden by defining a policy at a folder or project level.

A client has brought you in to help reduce their DevOps overhead. Engineers are spending too much time patching servers and optimizing server utilization. They want to move to serverless platforms as much as possible. Your client has heard of Cloud Functions and wants to use them as much as possible. You recommend all of the following types of applications except which one? A. Long-running data warehouse data load procedures B. IoT backend processing C. Mobile application event processing D. Asynchronous workflows

A. Long-running data warehouse data load procedures

You are designing cloud applications for a healthcare provider. The records management application will manage medical information for patients. Access to this data is limited to a small number of employees. The billing department application will have insurance and payment information. Another group of employees will have access billing information. In addition, the billing system will have two components: a private insurance billing system and a government payer billing system. Government regulations require that software used to bill the government must be isolated from other software systems. Which of the following resource hierarchies would meet these requirements and provide the most flexibility to adapt to changing requirements? A. One organization, with folders for records management and billing. The billing folder would have private insurer and government payer folders within it. Common constraints would be specified in organization-level policies. Other policies would be defined at the appropriate folder. B. One folder for records management, one for billing, and no organization. Policies defined at the folder level. C. One organization, with folders for records management, private insurer, and government payer below the organization. All constraints would be specified in organization-level policies. All folders would have the same policy constraints. D. None of the above.

A. One organization, with folders for records management and billing. The billing folder would have private insurer and government payer folders within it. Common constraints would be specified in organization-level policies. Other policies would be defined at the appropriate folder.

What parameters need to be specified when creating a VM in Compute Engine? A. Project and zone B. Username and admin role C. Billing account D. Cloud Storage bucket

A. Project and zone

You have an application that uses a Pub/Sub message queue to maintain a list of tasks that are to be processed by another application. The application that consumes messages from the Pub/Sub queue removes the message only after completing the task. It takes approximately 10 seconds to complete a task. It is not a problem if two or more VMs perform the same task. What is a cost-effective configuration for processing this workload? A. Use preemptible VMs B. Use standard VMs C. Use DataProc D. Use Spanner

A. Use preemptible VMs

Your management team is considering three different cloud providers. You have been asked to summarize billing and cost information to help the management team compare cost structures between clouds. Which of the following would you mention about the cost of VMs in GCP? A. VMs are billed in 1-second increments, cost varies with the number of CPUs and amount of memory in a machine type, you can create custom machine types, preemptible VMs cost up to 80 percent less than standard VMs, and Google offers discounts for sustained usage. B. VMs are billed in 1-second increments and VMs can run up to 24 hours before they will be be shut down. C. Google offers discounts for sustained usage in only some regions, cost varies with the number of CPUs and amount of memory in a machine type, you can create custom machine types, preemptible VMs cost up to 80 percent less than standard VMs. D. VMs are charged for a minimum of 1 hour of use and cost varies with the number of CPUs and amount of memory in a machine type.

A. VMs are billed in 1-second increments, cost varies with the number of CPUs and amount of memory in a machine type, you can create custom machine types, preemptible VMs cost up to 80 percent less than standard VMs, and Google offers discounts for sustained usage.

Which of the following commands will create a VM with four CPUs that is named web-server-1? A. gcloud compute instances create --machine-type=n1-standard-4 web-server-1 B. gcloud compute instances create --cpus=4 web-server-1 C. gcloud compute instances create --machine-type=n1-standard-4 -instance-name web-server-1 D. gcloud compute instances create --machine-type=n1-4-cpu web-server-1

A. gcloud compute instances create --machine-type=n1-standard-4 web-server-1

Your company has deployed 100,000 Internet of Things (IoT) sensors to collect data on the state of equipment in several factories. Each sensor will collect and send data to a data store every 5 seconds. Sensors will run continuously. Daily reports will produce data on the maximum, minimum, and average value for each metric collected on each sensor. There is no need to support transactions in this application. Which database product would you recommend? A. Cloud Spanner B. Cloud Bigtable C. Cloud SQL MySQL D. Cloud SQL PostgreSQL

B. Cloud Bigtable

What role gives users full control over Compute Engine instances? A. Compute Manager role B. Compute Admin role C. Compute Manager role D. Compute Security Admin

B. Compute Admin role

You are planning how to grant privileges to users of your company's GCP account. You need to document what each user will be able to do. Auditors are most concerned about a role called Organization IAM roles. You explain that users with that role can perform a number of tasks, which include all of the following except which one? A. Defining the structure of the resource hierarchy B. Determining what privileges a user should be assigned C. Defining IAM policies over the resource hierarchy D. Delegating other management roles to other users

B. Determining what privileges a user should be assigned

Why can cloud providers offer elastic resource allocation? A. Cloud providers can take resources from lower-priority customers and give them to higher-priority customers. B. Extensive resources and the ability to quickly shift resources between customers enables public cloud providers to offer elastic resource allocation more efficiently than can be done in smaller data centers. C. They charge more the more resources you use. D. They don't.

B. Extensive resources and the ability to quickly shift resources between customers enables public cloud providers to offer elastic resource allocation more efficiently than can be done in smaller data centers.

A software engineer comes to you for a recommendation. She has implemented a machine learning algorithm to identify cancerous cells in medical images. The algorithm is computationally intensive, makes many mathematical calculations, requires immediate access to large amounts of data, and cannot be easily distributed over multiple servers. What kind of Compute Engine configuration would you recommend? A. High memory, high CPU B. High memory, high CPU, GPU C. Mid-level memory, high CPU D. High CPU, GPU

B. High memory, high CPU, GPU

You have been asked to design a storage system for a web application that allows users to upload large data files to be analyzed by a business intelligence workflow. The files should be stored in a high-availability storage system. File system functionality is not required. Which storage system in Google Cloud Platform should be used? A. Block storage B. Object storage C. Cache D. Network File System

B. Object storage

What is the lowest level of the resource hierarchy? A. Folder B. Project C. File D. VM instance

B. Project

A team with four members needs you to set up a project that needs only general permissions for all resources. You are granting each person a primitive role for different levels of access, depending on their responsibilities in the project. Which of the following are not included as primitive roles in Google Cloud Platform? A. Owner B. Publisher C. Editor D. Viewer

B. Publisher

Your manager is making a presentation to executives in your company advocating that you start using Kubernetes Engine. You suggest that the manager highlight all the features Kubernetes provides to reduce the workload on DevOps engineers. You describe several features, including all of the following except which one? A. Load balancing across Compute Engine VMs that are deployed in a Kubernetes cluster B. Security scanning for vulnerabilities C. Automatic scaling of nodes in the cluster D. Automatic upgrading of cluster software as needed

B. Security scanning for vulnerabilities

An architect has suggested a particular machine type for your workload. You are in the console creating a VM and you don't see the machine type in the list of available machine types. What could be the reason for this? A. You have selected the incorrect subnet. B. That machine type is not available in the zone you specified. C. You have chosen an incompatible operating system. D. You have not specified a correct memory configuration.

B. That machine type is not available in the zone you specified.

Your company is based in X and will be running a virtual server for Y. What factor determines the unit per minute cost? A. The time of day the VM is run B. The characteristics of the server C. The application you run D. None of the above

B. The characteristics of the server

When creating a VM using the command line, how should you specify labels for the VM? A. Use the --labels option with labels in the format of KEYS:VALUES. B. Use the --labels option with labels in the format of KEYS=VALUE. C. Use the --labels option with labels in the format of KEYS,VALUES. D. This is not possible in the command line.

B. Use the --labels option with labels in the format of KEYS=VALUE.

A mobile application uploads images for analysis, including identifying objects in the image and extracting text that may be embedded in the image. A third party has created the mobile application, and you have developed the image analysis service. You both agree to use Cloud Storage to store images. You want to keep the two services completely decoupled, but you need a way to invoke the image analysis as soon as an image is uploaded. How should this be done? A. Change the mobile app to start a VM running the image analysis service and have that VM copy the file from storage into local storage on the VM. Have the image service run on the VM. B. Write a function in Python that is invoked by Cloud Functions when a new image file is written to the Cloud Storage bucket that receives new images. The function should submit the URL of the uploaded file to the image analysis service. The image analysis service will then load the image from Cloud Storage, perform analysis, and generate results, which can be saved to Cloud Storage. C. Have a Kubernetes cluster running continuously, with one pod dedicated to listing the contents of the upload bucket and detecting new files in Cloud Storage and another pod dedicated to running the image analysis software. D. Have a Compute Engine VM running and continuously listing the contents of the upload bucket in Cloud Storage to detect new files. Another VM should be continually running the image analysis software.

B. Write a function in Python that is invoked by Cloud Functions when a new image file is written to the Cloud Storage bucket that receives new images. The function should submit the URL of the uploaded file to the image analysis service. The image analysis service will then load the image from Cloud Storage, perform analysis, and generate results, which can be saved to Cloud Storage.

You lead a team of cloud engineers who maintain cloud resources for several departments in your company. You've noticed a problem with configuration drift. Some machine configurations are no longer in the same state as they were when created. You can't find notes or documentation on how the changes were made or why. What practice would you implement to solve this problem? A. Have all cloud engineers use only command-line interface in Cloud Shell. B. Write scripts using gcloud commands to change configuration and store those scripts in a version control system. C. Take notes when making changes to configuration and store them in Google Drive. D. Limit privileges so only you can make changes so you will always know when and why configurations were changed.

B. Write scripts using gcloud commands to change configuration and store those scripts in a version control system.

Custom VMs can have up to how many vCPUs? A. 16 B. 32 C. 64 D. 128

C. 64

In the boot disk advanced configuration, which operations can you specify when creating a new VM? A. Add a new disk, reformat an existing disk, attach an existing disk B. Add a new disk and reformat an existing disk C. Add a new disk and attach an existing disk D. Reformat an existing disk and attach an existing disk

C. Add a new disk and attach an existing disk

When using the App Engine standard environment, which of the following language's runtime is not supported? A. Java B. Python C. C D. Go

C. C

Your company has licensed a third-party software package that runs on Linux. You will run multiple instances of the software in a Docker container. Which of the following GCP services could you use to deploy this software package? A. Compute Engine only B. Kubernetes Engine only C. Compute Engine, Kubernetes Engine, and the App Engine flexible environment only D. Compute Engine, Kubernetes Engine, the App Engine flexible environment, or the App Engine standard environment

C. Compute Engine, Kubernetes Engine, and the App Engine flexible environment only

Your manager asks for your help with understanding cloud computing costs. Your team runs dozens of VMs for three different applications. Two of the applications are for use by the marketing department and one is use by the finance department. Your manager wants a way to bill each department for the cost of the VMs used for their applications. What would you suggest to help solve this problem? A. Access controls B. Persistent disks C. Labels and descriptions D. Descriptions only

C. Labels and descriptions

When you create a machine learning service to identify text in an image, what type of servers should you use to manage compute resources? A. VMs B. Clusters of VMs C. No servers; specialized services are serverless D. VMs running Linux only

C. No servers; specialized services are serverless

What is not a characteristic of specialized services in Google Cloud Platform? A. They are serverless; you do not need to configure servers or clusters. B. They provide a specific function, such as translating text or analyzing images. C. They require monitoring by the user. D. They provide an API to access the functionality of the service.

C. They require monitoring by the user.

You have just opened the GCP console at console.google.com. You have authenticated with the user you want to use. What is one of the first things you should do before performing tasks on VMs? A. Open Cloud Shell. B. Verify you can SSH into a VM. C. Verify that the selected project is the one you want to work with. D. Review the list of running VMs.

C. Verify that the selected project is the one you want to work with.

You are experimenting with GCP for your company. You do not have permission to incur costs. How can you experiment with GCP without incurring charges? A. You can't; all services incur charges. B. You can use a personal credit card to pay for charges. C. You can use only free services in GCP. D. You can use only serverless products, which are free to use.

C. You can use only free services in GCP.

Why would an API developer want to use the Apigee API platform? A. To get the benefits of routing and rate-limiting B. Authentication services C. Version control of code D. A and B E. All of the above

D. A and B

Your DevOps team has decided to use Stackdriver monitoring and logging. You have been asked to set up Stackdriver workspaces. When you set up a Stackdriver workspace, what kind of resource is it associated with? A. A Compute Engine instance only B. A Compute Engine instance or Kubernetes Engine cluster only C. A Compute Engine instance, Kubernetes Engine cluster, or App Engine app D. A project

D. A project

If you use a cluster that is managed by a cloud provider, which of these will be managed for you by the cloud provider? A. Monitoring B. Networking C. Some security management tasks D. All of the above

D. All of the above

The Cloud SDK can be used to configure and manage resources in which of the following services? A. Compute Engine B. Cloud Storage C. Network firewalls D. All of the above

D. All of the above

Which of the following are limitations of a preemptible VM? A. Will be terminated within 24 hours. B. May not always be available. Availability may vary across zones and regions. C. Cannot migrate to a regular VM. D. All of the above

D. All of the above

You have created a VM. Which of the following system administration operations are you allowed to perform on it? A. Configure the file system B. Patch operating system software C. Change file and directory permissions D. All of the above

D. All of the above

You are deploying a new custom application and want to delegate some administration tasks to DevOps engineers. They do not need all the privileges of a full application administrator, but they do need a subset of those privileges. What kind of role should you use to grant those privileges? A. Primitive B. Predefined C. Advanced D. Custom

D. Custom

How many projects can be created in an account? A. 10 B. 25 C. There is no limit. D. Each account has a limit determined by Google.

D. Each account has a limit determined by Google.

Your company is about to release a new online service that builds on a new user interface experience driven by a set of services that will run on your servers. There is a separate set of services that manage authentication and authorization. A data store set of services keeps track of account information. All three sets of services must be highly reliable and scale to meet demand. Which of the GCP services is the best option for deploying this? A. App Engine standard environment B. Compute Engine C. Cloud Functions D. Kubernetes Engine

D. Kubernetes Engine

An app for a finance company needs access to a database and a Cloud Storage bucket. There is no predefined role that grants all the needed permissions without granting some permissions that are not needed. You decide to create a custom role. When defining custom roles, you should follow which of the following principles? A. Rotation of duties B. Least principle C. Defense in depth D. Least privilege

D. Least privilege

What server configuration is required to use Cloud Functions? A. VM configuration B. Cluster configuration C. Pub/Sub configuration D. None

D. None

Your team is developing a new pipeline to analyze a stream of data from sensors on manufacturing devices. The old pipeline occasionally corrupted data because parallel threads overwrote data written by other threads. You decide to use Cloud Functions as part of the pipeline. As a developer of a Cloud Function, what do you have to do to prevent multiple invocations of the function from interfering with each other? A. Include a check in the code to ensure another invocation is not running at the same time. B. Schedule each invocation to run in a separate process. C. Schedule each invocation to run in a separate thread. D. Nothing. GCP ensures that function invocations do not interfere with each other.

D. Nothing. GCP ensures that function invocations do not interfere with each other.

Your company is seeing a marked increase in the rate of customer growth in Europe. Latency is becoming an issue because your application is running in us-central1. You suggest deploying your services to a region in Europe. You have several choices. You should consider all of the following factors except which one? A. Cost B. Latency C. Regulations D. Reliability

D. Reliability

You need to store data for X and therefore you are using a cache for Y. How will the cache affect data retrieval? A. A cache improves the execution of client-side JavaScript. B. A cache will continue to store data even if power is lost, improving availability. C. Caches can get out of sync with the system of truth. D. Using a cache will reduce latency, since retrieving from a cache is faster than retrieving from SSDs or HDDs.

D. Using a cache will reduce latency, since retrieving from a cache is faster than retrieving from SSDs or HDDs.

Constraints are used in resource hierarchy policies. Which of the following are types of constraints allowed? A. Allow a specific set of values B. Deny a specific set of values C. Deny a value and all its child values D. Allow all allowed values E. All of the above

E. All of the above