Coursera GCP Associate Could Engineer

A Google Cloud customer wants to load-balance traffic among the backend VMs that form part of a multi-tier application. Which load-balancing option should this customer choose? A. The regional load balancer B. The global SSL proxy C. The global HTTP(S) load balancer D. The global TCP proxy E. The regional internal load balancer

E. The regional internal load balancer

Which of the following is not a type of IAM role? A. Advanced B. Predefined C. Custom D. Basic

A. Advanced

Which statement best describes how Google Cloud resources are associated within the resource hierarchy? A. All Google Cloud resources are associated with a project. B. Google Cloud resources are not associated with the resource hierarchy. C. All Google Cloud resources are associated with a folder. D. All Google Cloud resources are associated with an organization.

A. All Google Cloud resources are associated with a project.

Which statements are true about App Engine? (Select 2.) A. App Engine manages the hardware and networking infrastructure required to run your code. B. App Engine requires you to supply or code your own application load balancing and logging services. C. Developers who write for App Engine do not need to code their applications in any particular way to use the service. D. App Engine charges you based on the resources you preallocate instead of the resources you use. E. The daily billing for an App Engine application can drop to zero.

A. App Engine manages the hardware and networking infrastructure required to run your code. E. The daily billing for an App Engine application can drop to zero.

In GKE clusters, how are nodes provisioned? A. As Compute Engine virtual machines B. As abstract parts of the GKE service that are not exposed to Google Cloud customers

A. As Compute Engine virtual machines

Which of these Google Cloud compute services provides environments for execution of code, in which users don't have to worry about infrastructure management? (Select 2.) A. Cloud Functions B. Compute Engine C. Google Kubernetes Engine D. App Engine

A. Cloud Functions D. App Engine

Select the advantage of putting the event-driven components of your application into Cloud Functions? A. Cloud Functions handles scaling these components seamlessly. B. In Cloud Functions, processing is always free of charge. C. Cloud Functions eliminates the need to use a separate service to trigger application events. D. In Cloud Functions, code can be written in C# or C++.

A. Cloud Functions handles scaling these components seamlessly.

Select the two correct statements about Cloud Logging. A. Cloud Logging lets you define metrics based on your logs. B. Cloud Logging lets you define uptime checks. C. Cloud Logging requires you to store your logs in BigQuery or Cloud Storage. D. Cloud Logging lets you view logs from your applications and filter and search on them. E. Cloud Logging requires the use of a third-party monitoring agent.

A. Cloud Logging lets you define metrics based on your logs. D. Cloud Logging lets you view logs from your applications and filter and search on them.

Which of these ways to interact with give you access to the gcloud and kubectl commands? (Select 2.) A. Cloud SDK B. Console C. Cloud Console mobile app D. Cloud Shell

A. Cloud SDK D. Cloud Shell

You are ready to start work building an application in Google Cloud. What IAM hierarchy should you implement for this project? A. Create a new folder inside your organization and create projects inside that folder for the resources. B. Create new projects and resources inside departmental folders for the resources needed by the component applications. C. Create new projects for each of the component applications and create folders inside those for the resources. D. Create a new organization for the project and create all projects and resources inside the new organization.

A. Create a new folder inside your organization and create projects inside that folder for the resources.

Which statements are true about cloud computing? (Select 2.) A. Customers who need more resources can get them rapidly B. Customers pay for the resources they use or reserve. C. Cloud computing providers dedicate particular physical resources to particular customers. D. Human intervention is required to stop using cloud resources once reserved, and payment continues until the change is confirmed.

A. Customers who need more resources can get them rapidly B. Customers pay for the resources they use or reserve.

Which interconnect option is a service level agreement (SLA) available for? A. Dedicated Interconnect B. Carrier Peering C. Direct Peering D. Standard Network Tier

A. Dedicated Interconnect

What is the primary benefit to a Google Cloud customer of using resources in several zones within a region? A. For improved fault tolerance B. For better performance C. For expanding services to customers in new areas D. For getting discounts on other zones

A. For improved fault tolerance

You are deploying a containerized application, and you want maximum control over how containers are configured and deployed. You want to avoid operational management overhead of managing a full container cluster environment yourself. Which Google Cloud compute solution should you choose? A. Google Kubernetes Engine B. Cloud Functions C. Compute Engine D. App Engine

A. Google Kubernetes Engine

You are considering deploying a solution using containers on Google Cloud. What Google Cloud solutions are available to you that will provide a managed compute platform with native support for containers? A. Google Kubernetes Engine Clusters B. Cloud Functions C. Compute Engine Autoscaling Groups D. Container Registry

A. Google Kubernetes Engine Clusters

What is the relationship between Kubernetes and Google Kubernetes Engine? A. Google Kubernetes Engine is Kubernetes as a managed service. B. Google Kubernetes Engine is a closed-source variant of Kubernetes. C. Kubernetes and Google Kubernetes Engine are two names for the same thing.

A. Google Kubernetes Engine is Kubernetes as a managed service.

Select two reasons for using containers to deploy applications. (Choose 2 responses.) A. Migrating workloads is simpler. B. Allocating resources in which to run containers is not necessary. C. It creates consistency across development, testing, and production environments. D. It provides tight coupling between applications and operating systems.

A. Migrating workloads is simpler. C. It creates consistency across development, testing, and production environments.

In Google Cloud, what is the minimum number of IP addresses that a VM instance needs? A. One: Only an internal IP address B. Two: One internal and one external IP address C. Three: One internal, one external and one alias IP address

A. One: Only an internal IP address

At what level in the Google Cloud resource hierarchy is billing set up? A. Project B. Folder C. Organization D. Individual users

A. Project

What is the base-level organizing entity for creating and using Google Cloud resources and services? A. Project B. Region C. Cluster D. Folder

A. Project

Which of the following are applicable autoscaling policies for managed instance groups? A. Queue-based workload B. Monitoring metrics C. CPU utilization D. Load balancing capacity

A. Queue-based workload B. Monitoring metrics C. CPU utilization D. Load balancing capacity

Which type of quota resets at regular intervals? A. Rate quotas B. Allocation quotas

A. Rate quotas

Within which of these Google Cloud geographic scopes are network latencies generally less than 1 millisecond? (Select 2.) A. Region B. Multi-Region C. Global D. Zone

A. Region D. Zone

Select two fundamental characteristics of cloud computing from this list. A. Resources are available from anywhere over the network. B. Customers are required to commit to multi-year contracts. C. Providers always dedicate physical resources to each customer. D. All resources are open source. E. Customers can scale their resource use up and down.

A. Resources are available from anywhere over the network. E. Customers can scale their resource use up and down.

What abstraction is primarily used to administer user access in IAM? A. Roles, an abstraction of job roles. B. Leases, an abstraction of periodic entitlements. C. Credentials, an abstraction of an authorization token. D. Privileges, an abstraction of access rights.

A. Roles, an abstraction of job roles.

If you are deploying applications in your Pods that need persistent storage, which controller type should you use? A. StatefulSet B. Deployment C. DaemonSet D. ReplicaSet

A. StatefulSet

Which three Google Cloud load balancing services support IPv6 clients? A. TCP proxy load balancing B. Network load balancing C. HTTP(S) load balancing D. SSL proxy load balancing E. Internal load balancing

A. TCP proxy load balancing C. HTTP(S) load balancing D. SSL proxy load balancing

How do you keep your Kubernetes version updated in Google Kubernetes Engine? A. The Google Kubernetes Engine team periodically performs automatic upgrades of your cluster to newer stable versions. B. You cannot update a running cluster. You need to create a copy of the cluster with the updated Kubernetes version. C. You need to stop your cluster and manually update the Kubernetes version in your cluster. D. You are required to set up a cron job to periodically check the Kubernetes version in your cluster.

A. The Google Kubernetes Engine team periodically performs automatic upgrades of your cluster to newer stable versions.

Why might a Google Cloud customer choose to use Cloud Functions? A. Their application contains event-driven code that they don't want to provision compute resources for. B. Their application has a legacy monolithic structure that they want to separate into microservices. C. Cloud Functions is the primary way to run Node.js applications in Google Cloud. D. Cloud Functions is a free service for hosting compute operations.

A. Their application contains event-driven code that they don't want to provision compute resources for.

Consider a single hierarchy of Google Cloud resources. Which of these situations is possible? (Choose 3 responses.) A. There is no organization node, and there are no folders. B. There is no organization node, but there is at least one folder. C. There is an organization node, and there are no folders. D. There is an organization node, and there is at least one folder. E. There are two or more organization nodes.

A. There is no organization node, and there are no folders. C. There is an organization node, and there are no folders. D. There is an organization node, and there is at least one folder.

What is the purpose of configuring a regional cluster in GKE? A. To allow applications running in the cluster to withstand the loss of a zone B. To ensure that the cluster's workloads are isolated from the public Internet

A. To allow applications running in the cluster to withstand the loss of a zone

Why do Linux containers use union file systems? A. To efficiently encapsulate applications and their dependencies into a set of clean, minimal layers B. To control an application's maximum consumption of CPU time and memory C. To give a container its own virtual memory address space D. To control an application's ability to see parts of the directory tree and IP addresses

A. To efficiently encapsulate applications and their dependencies into a set of clean, minimal layers

What is the purpose of a (Kubernetes) Service? (Select 2.) A. To provide a load-balancing network endpoint for Pods B. To allow you to choose how Pods are exposed C. To allow you to put constraints on Pods' resource consumption D. To provide a way to inspect and diagnose code running in a Pod

A. To provide a load-balancing network endpoint for Pods B. To allow you to choose how Pods are exposed

Preemptible VMs can offer advantages over a standard Compute Engine VM. What is a reason customers choose preemptible VMs? A. To reduce cost B. To improve performance C. To reduce cost on premium operating systems D. To use custom machine types

A. To reduce cost

Why would a developer choose to store source code in Cloud Source Repositories? (Select 2.) A. To reduce work B. To have total control over the hosting infrastructure C. To keep code private to a Google Cloud project D. It is the only way to access your source code in a repository.

A. To reduce work C. To keep code private to a Google Cloud project

What is the role of kubelet? A. To serve as Kubernetes's agent on each node B. To maintain network connectivity among the Pods in a cluster C. To interact with underlying cloud providers

A. To serve as Kubernetes's agent on each node

When would you choose to have an organization node? (Select two) A. When you want to create folders B. When you want to organize resources into projects C. When you want to centrally apply organization-wide policies D. There's no choice; organization nodes are mandatory.

A. When you want to create folders C. When you want to centrally apply organization-wide policies

One of the key characteristics of cloud computing is the concept of measured service. What is the primary customer benefit of the measured service aspect of cloud computing? A. You pay only for the resources you consume. B. You share resources from a large pool enabling economies of scale. C. You can get more resources as quickly as you need them. D. Resources can be allocated automatically.

A. You pay only for the resources you consume.

What type of resource is a Compute Engine virtual machine? A. Zonal B. Regional C. Multi-regional D. Global

A. Zonal

Which control plane component is the cluster database? A. etcd B. kube-apiserver C. kube-scheduler D. kube-controller-manager

A. etcd

Which control plane component is the only one with which clients interact directly? A. kube-apiserver B. etcd C. kube-scheduler D. kube-controller-manager

A. kube-apiserver

Your company has two Google Cloud projects and you want them to share policies. What is the least error-prone way to set this up? A. Duplicate all the policies from one project onto the other. B. Place both projects into a folder, and define the policies on that folder. C. Create shared resource policies on the common resources that are used in both projects. D. Define the new shared policy in the organization node.

B. Place both projects into a folder, and define the policies on that folder.

You are classifying a number of your applications into workload types. Select the stateful applications in this list of applications. (Select 2.) A. Image recognition application that identifies product defects from images. B. A gaming application that keeps track of user state persistently. C. A shopping application that saves user shopping cart data between sessions. D. Web server front end for your inventory system.

B. A gaming application that keeps track of user state persistently. C. A shopping application that saves user shopping cart data between sessions.

App Engine is best suited to the development and hosting of which type of application? A. A long-running batch processing application B. A web application C. Applications that require full control of the hardware they are running on D. Applications that require at least one instance running at all times.

B. A web application

Which Google Cloud service should you choose to perform business analytics and billing for a customer-facing API? A. Cloud Run API B. Apigee API Management C. Cloud Endpoints D. Compute Engine API

B. Apigee API Management

In GKE, how are control planes provisioned? A. As Compute Engine virtual machines B. As abstract parts of the GKE service that are not exposed to Google Cloud customers

B. As abstract parts of the GKE service that are not exposed to Google Cloud customers

You are designing an application, and you want to ensure that the containers are located as close to each other as possible, in order to minimize latency. Which design decision helps meet this requirement? A. Give the containers the same labels. B. Place the containers in the same Pod. C. Place the containers in the same Namespace. D. Place the containers in the same cluster.

B. Place the containers in the same Pod.

Which of the following is not a type of IAM member? A. Cloud Identity domain B. Organization Account C. Service Account D. Google Group E. Google Workspace domain F. Google Account

B. Organization Account

Google Compute Engine provides fine-grained control of costs. Which Compute Engine features provide this level of control? (Select 2.) A. Managed instance groups B. Per-second billing C. Billing budgets and alerts D. Fully customizable virtual machines E. Autoscaling groups

B. Per-second billing D. Fully customizable virtual machines

Select the option that displays IAM roles from general to specific. A. Predefined roles, custom roles, basic roles B. Basic roles, predefined roles, custom roles C. Custom roles, predefined roles, basic roles

B. Basic roles, predefined roles, custom roles

Which one of the following statements is true regardinBg the ability to scale cloud computing resources up and down? A. Only CPU and memory resources are elastic. B. CPU, memory and storage resources are elastic. C. Cloud computing does not provide a way to scale resources. D. Only storage resources are elastic.

B. CPU, memory and storage resources are elastic.

Select the managed compute platform that lets you run stateless containers through web requests or Pub/Sub events. A. Cloud Endpoints B. Cloud Run C. Cloud Source Repositories D. Apigee API Management

B. Cloud Run

What is the difference between the Google Cloud Console and Cloud Shell? A. The Cloud Console is a command-line tool, while Cloud Shell is a graphical user interface B. Cloud Shell is a command-line tool, while the Cloud Console is a graphical user interface C. There is no difference as these tools are 100% identical. D. Cloud Shell is a locally installed tool, while the Cloud Console is a temporary virtual machine.

B. Cloud Shell is a command-line tool, while the Cloud Console is a graphical user interface

Where do the resources used to build Google Kubernetes Engine clusters come from? A. Cloud Storage B. Compute Engine C. Bare metal servers D. App Engine

B. Compute Engine

How do containers access an operating system? A. Each container has its own instance of an operating system. B. Containers use a shared base operating system stored in a shared kernel layer. C. Containers use a shared base operating system stored in a Cloud Storage bucket. D. Containers use a shared base operating system stored in a shared runtime layer.

B. Containers use a shared base operating system stored in a shared kernel layer.

When you use Kubernetes, you describe the desired state you want, and Kubernete's job is to make the deployed system conform to your desired state and to keep it there in spite of failures. What is the name for this management approach? A. Virtualization B. Declarative configuration C. Containerization D. Imperative configuration

B. Declarative configuration

How does the resource hierarchy control how IAM policies are inherited? A. IAM policies that are implemented higher in the resource hierarchy deny access that is granted by lower-level policies. B. IAM policies that are implemented by lower-level policies can override the policies defined at a higher level. C. IAM policies are only implemented at the project level; they cannot be amended by lower levels of the resource hierarchy.

B. IAM policies that are implemented by lower-level policies can override the policies defined at a higher level.

There are "Four Golden Signals" that measure a system's performance and reliability. What are they? A. Availability, durability, scalability, resiliency B. Latency, traffic, saturation, errors C. Get, post, put, delete D. KPIs, SLIs, SLOs, SLAs

B. Latency, traffic, saturation, errors

Select the true statement about Google's VPC networks and subnets. A. Networks are regional, and subnets are zonal. B. Networks are global, and subnets are regional. C. Both networks and subnets are global. D. Networks are global, and subnets are zonal.

B. Networks are global, and subnets are regional.

What is the name for the computers in a Kubernetes cluster that can run your workloads? A. Container images B. Nodes C. Containers D. Control Planes

B. Nodes

What is significant about the topmost layer in a container? (Select 2.) A. Reading from or writing to the topmost layer requires special software libraries. B. The topmost layer's contents are ephemeral. When the container is deleted, the contents will be lost. C. An application running in a container can only modify the topmost layer. D. Reading from or writing to the topmost layer requires special privileges.

B. The topmost layer's contents are ephemeral. When the container is deleted, the contents will be lost. C. An application running in a container can only modify the topmost layer.

How are Firestore and Bigtable alike? (Select two answers.) A. They both have a free daily quota. B. They are both highly scalable. C. They are both NoSQL databases. D. They both offer SQL-like queries.

B. They are both highly scalable. C. They are both NoSQL databases.

Why would a customer consider the Coldline Storage class? A. To improve security B. To save money on storing infrequently accessed data C. To use the Coldline Storage API D. To save money on storing frequently accessed data

B. To save money on storing infrequently accessed data

What is a Kubernetes pod? A. A group of nodes B. A group of clusters C. A group of containers D. A group of VMs

C. A group of containers

What is a Kubernetes cluster? A. A group of containers that provide high availability for applications. B. A group of pods that manage the administration of a Kubernetes application. C. A group of machines where Kubernetes can schedule workloads.

C. A group of machines where Kubernetes can schedule workloads.

What is the difference between a pod and a container? A. A container contains one or more pods. B. Pods and containers are two names for the same thing. C. A pod contains one or more containers.

C. A pod contains one or more containers.

Which way of accessing Google Cloud lets you control services through the code you write? A. The Cloud Console B. The Cloud SDK and Cloud Shell C. APIs D. The Cloud Console mobile app

C. APIs

What is a stateful application? A. An application that is not containerized B. A web front end C. An application that requires user and session data to be stored persistently

C. An application that requires user and session data to be stored persistently

Cloud Run can only pull images from: A. Self-hosted registries B. GitHub C. Artifact Registry D. Docker Hub

C. Artifact Registry

If you cannot meet Google's peering requirements, which network connection service should you choose to connect to Google Workspace and YouTube? A. Direct Peering B. Dedicated Interconnect C. Carrier Peering D. Partner Interconnect

C. Carrier Peering

Your application needs to store data with strong transactional consistency, and you want seamless scaling up. Which storage option is the best choice for you application? A. Cloud SQL B. Cloud Storage C. Cloud Spanner D. Firestore

C. Cloud Spanner

Which statement describes the correct Cloud Storage use case? A. Cloud Storage provides data warehousing services. B. Cloud Storage provides the root file system of a Linux virtual machine. C. Cloud Storage provides durable and highly available object storage. D. Cloud Storage provides RDBMS (Relational Database Management System) services.

C. Cloud Storage provides durable and highly available object storage.

Who benefits the most from billing by the second for cloud resources, such as virtual machines? A. Customers who create too few virtual machines to get discounts B. Customers who create many virtual machines and leave them running for months C. Customers who create and run many virtual machines D. Customers who create virtual machines that run commercially licensed operating systems

C. Customers who create and run many virtual machines

JWhat are the three types of networks offered in Google Cloud? A. Zonal, regional, and global B. Gigabit network, 10 gigabit network, and 100 gigabit network C. Default network, auto network, and custom network. D. IPv4 unicast network, IPv4 multicast network, IPv6 network

C. Default network, auto network, and custom network.

Which of the following approaches to multi-project networking, uses a centralized network administration model? A. Cloud VPN B. VPC Network Peering C. Shared VPC

C. Shared VPC

Which of the following supports scaling a Kubernetes cluster as a whole? A. Compute Engine B. Kubernetes C. Google Kubernetes Engine

C. Google Kubernetes Engine

Which option describes a commitment made to your customers that your systems and applications will have only a certain amount of "downtime"? A. Key performance indicator B. Service level objective C. Service level agreement D. Service level indicator

C. Service level agreement

You are developing a new product for a customer and need to implement control structures in Google Cloud to help manage the Google Cloud resources consumed by the product and the billing for the customer account. What steps should you take to mange costs for this product and customer? A. Configure quotas and limits for the product folders. B. Configure the billing account at the product folder level in the resource hierarchy. C. Set up budgets and alerts at the project level for the product. D. Configure the billing account for each project associated with the product.

C. Set up budgets and alerts at the project level for the product.

Why might a Google Cloud customer choose to use Terraform? A. Terraform can be used as a version-control system for your Google Cloud infrastructure layout. B. Terraform can be used as an infrastructure management system for Kubernetes pods. C. Terraform can be used as an infrastructure management system for Google Cloud resources. D. Terraform can be used to enforce maximum resource utilization and spending limits on your Google Cloud resources.

C. Terraform can be used as an infrastructure management system for Google Cloud resources.

You need to write some automated scripts to run periodic updates to the resources in your Google Cloud environment. What tools can you install in your own computers to allow you to run those scripts? A. The Google Cloud Console B. The Cloud Console Mobile app C. The Cloud SDK D. The Cloud Shell

C. The Cloud SDK

Which statement best describes how VPC routers and firewalls work? A. They are managed by Google in virtual machines and customers can tune or deactivate them. B. Customers provision virtual machines and run their routers and firewalls in them. C. They are managed by Google as a built-in feature. D. They are managed by Google in virtual machines and customers cannot modify them.

C. They are managed by Google as a built-in feature.

What are the advantages of using App Engine's flexible environment instead of its standard environment? (Select 3.) A. Your application can execute code in background threads. B. Google provides automatic in-place security patches. C. You can install third-party binaries across all languages. D. You can use SSH to connect to the virtual machines on which your application runs. E. Your application can write to the local disk.

C. You can install third-party binaries across all languages. D. You can use SSH to connect to the virtual machines on which your application runs. E. Your application can write to the local disk.

Which data storage service provides data warehouse services for storing data but also offers an interactive SQL interface for querying data? A. Cloud SQL B. Dataproc C. Datalab D. BigQuery

D. BigQuery

You manufacture devices with sensors and need to stream huge amounts of data from these devices to a storage option in the cloud. Which Google Cloud Platform storage option is the best choice for your application? A. Firestore B. Cloud Spanner C. BigQuery D. Bigtable

D. Bigtable

Which of the following does not allow you to interact with Google Cloud?' A. REST-based API B. Cloud Shell C. Google Cloud Console D. Cloud Explorer

D. Cloud Explorer

You want to create alerts on your Google Cloud resources, such as when health checks fail. Which is the best Google Cloud product to use? A. Cloud Functions B. Could Trace C. Cloud Reporting D. Cloud Monitoring

D. Cloud Monitoring

What data storage service might you select if you just needed to migrate a standard relational database running on a single machine in a datacenter to the cloud? A. Cloud Storage B. Persistent Disk C. BigQuery D. Cloud SQL

D. Cloud SQL

Which Google Cloud data storage service offers ACID transactions and can scale globally? A. Cloud Storage B. Cloud SQL C. Cloud CDN D. Cloud Spanner

D. Cloud Spanner

Which SQL database service can scale to petabyte database sizes? A. Firestore B. Cloud SQL C. Bigtable D. Cloud Spanner

D. Cloud Spanner

You are choosing a technology for deploying applications, and you want to deliver them in lightweight, standalone, resource-efficient, portable packages. Which choice best meets those goals? A. Virtual Machines B. Hypervisors C. Executable files D. Containers

D. Containers

Which definitions best describe a service level indicator (SLI)? A. A percentage goal of a measure you intend your service to achieve B. A key performance indicator; for example, clicks per session or customer signups C. A contract with your customers regarding service performance D. A time-bound measurable attribute of a service

D. A time-bound measurable attribute of a service

Anthos provides a rich set of tools for monitoring and maintaining the consistency of your applications across which of the following locations? A. Applications hosted on-premises only. B. Applications hosted with one cloud provider only. C. Applications hosted with multiple cloud providers only. D. Applications hosted on-premises, in the cloud, or in multiple clouds.

D. Applications hosted on-premises, in the cloud, or in multiple clouds.

What is the difference between Identify and Access Management (IAM) basic roles and IAM predefined roles? A. Basic roles only allow viewing, creating, and deleting resources. Predefined roles allow any modification. B. Basic roles only apply to the owner of the Google Cloud project. Predefined roles can be associated with any user. C. Basic roles can only be granted to single users. Predefined roles can be associated with a group. D. Basic roles affect all resources in a Google Cloud project. Predefined roles apply to a specific service in a project.

D. Basic roles affect all resources in a Google Cloud project. Predefined roles apply to a specific service in a project.

What is the purpose of Virtual Private Networking (VPN)? A. The main purpose is to encrypt data so that it can be stored in an encrypted format. B. It is a method to detect intruders at the edge of a network boundary. C. VPNs are also called access control lists, or ACLs, and they limit network access. D. To enable a secure communication method (a tunnel) to connect two trusted environments through an untrusted environment, such as the Internet.

D. To enable a secure communication method (a tunnel) to connect two trusted environments through an untrusted environment, such as the Internet.

Which term describes a secure, individual, private cloud-computing model hosted within a public cloud? A. Virtual private network (VPN) B. Domain name system (DNS) C. Content delivery network (CDN) D. Virtual private cloud (VPC)

D. Virtual private cloud (VPC)

What is one benefit of applying firewall rules by tag rather than by address? A. Tags help organizations track firewall billing. B. Tags in network traffic help with network sniffing. C. Tags on firewall rules control which ephemeral IP addresses VMs will receive. D. When a VM is created with a matching tag, the firewall rules apply irrespective of the IP address it is assigned.

D. When a VM is created with a matching tag, the firewall rules apply irrespective of the IP address it is assigned.

Which Google Cloud Interconnect service requires a connection in a Google Cloud colocation facility and provides 10 Gbps per link? A. Carrier Peering B. Cloud VPN C. Partner Interconnect D. Dedicated Interconnect E. Direct Peering

D. Dedicated Interconnect

Which of the following is not a Google Cloud load balancing service? A. HTTP(S) load balancing B. SSL proxy load balancing C. TCP proxy load balancing D. Hardware-defined load balancing E. Network load balancing F. Internal load balancing

D. Hardware-defined load balancing

What cloud computing service provides raw compute, storage, and network resources that are organized similarly to physical data. A. Platform as a service B. Software as a service C. Database as a service D. Infrastructure as a service

D. Infrastructure as a service

What cloud computing services binds application code to libraries that give access to the infrastructure an application needs? A. Software as a service B. Virtualized data centers C. Infrastructure as a service D. Platform as a service E. Hybrid cloud

D. Platform as a service