GCP - Associate Cloud Engineer Exam

Service accounts are used to provide which of the following? (Choose all that are correct. Choose 3 responses.)

Authentication between Google Cloud Platform services A way to restrict the actions a resource (such as a VM) can perform A way to allow users to act with service account permissions

What is the key advice presented about GCP deployment?

Automate everything you can -- because launch and release automation has an influence over reliability.

A simple way to let a VPN into your Google VPC continue to work in spite of routing changes

Cloud Router

Which statement is true about objects in Cloud Storage?

They are immutable, and new versions overwrite old unless you turn on versioning.

Why might a GCP customer choose to use Cloud Source Repositories?

They don't want to host their own git instance, and they want to integrate with IAM permissions.

True or False: All Google Cloud Platform resources are associated with a project.

True

True or False: Google Cloud Platform provides a secure, high-speed container image storage service for use with Kubernetes Engine.

True

True or False: Kubernetes allows you to manage container clusters in multiple cloud providers.

True

What reason is given for the design advice to "design first and dimension later"?

Trying to optimize cost or optimize for size (dimension) before the design is fully developed can lead to confusion and ambiguities in the design process. *

Why might a GCP customer choose to use Cloud Functions?

Their application contains event-driven code that they don't want to have to provision compute resources for.

Your application needs a relational database, and it expects to talk to MySQL. Which storage option is the best choice for your application?

Cloud SQL

fully managed mysql or postgres sql database service

Cloud SQL

Your application needs to store data with strong transactional consistency, and you want seamless scaling up. Which storage option is the best choice for your application?

Cloud Spanner

relational database with global scale and high reliability financial and retail (TRANACTIONAL CONSISTENCY)

Cloud Spanner

Which GCP storage service is often the ingestion point for data being moved into the cloud, and is frequently the long-term storage location for data?

Cloud Storage

a fully managed object store

Cloud Storage

You are developing an application that transcodes large video files. Which storage option is the best choice for your application?

Cloud Storage Cloud Bigtable

Which compute service lets customers run virtual machines that run on Google's infrastructure?

Compute Engine

Identify two reasons for deploying applications using containers. (Choose 2 responses.)

Consistency across development, testing, production environments Simpler to migrate workloads No need to allocate resources in which to run containers Tight coupling between applications and operating systems

Which platform processing service is designed to offer the lowest IT overhead so you can focus on the application?

Google App Engine (GAE)

Which GCP platform services are identified as useful for the 12-factor principle of "store configuration information in the environment"?

Google Cloud Storage and the Metadata Server.

How do GCP customers and Google Cloud Platform divide responsibility for security?

Google takes care of the lower parts of the stack, and customers are responsible for the higher parts.

What is the "principle of least privilege" as it relates to IAM Policies?

Grant roles at the smallest scope needed for the individual or service account to be functional with the services they require.

How do the Nearline and Coldline storage classes differ from Multi-regional and Regional? Choose all that are correct (2 responses).

Nearline and Coldline assess lower storage fees. Nearline and Coldline have lower durability. Nearline and Coldline assess additional retrieval fees. Nearline and Coldline use a differently-architected API.

When starting a Kubernetes cluster in Kubernetes Engine do you need to create a Master?

No, the Master is created by Kubernetes Engine as part of the interface that controls the cluster.

To design to overcome a single point of failure, the N+2 strategy is recommended. What is N+2?

One alternative to ' N' to handle an upgrade, and a second to handle a service outage.

Which of these storage needs is best addressed by Cloud Bigtable?

Structured objects, with lookups based on a single key

Which of these storage needs is best addressed by Cloud Datastore?

Structured objects, with transactions and SQL-like queries

What are three methods for reducing the price of virtual machines (VMs) in GCP?

Sustained use discounts. Committed use discounts. Preemptible VMs

Which edge features of Google's networking provide automatic protections against Distributed Denial of Service attacks (DDoS) ?

TCP/SSL proxy, Global Load Balancing, and Cloud CDN.

For what kind of traffic would the regional load balancer be the first choice? Choose all that are correct (2 answers).

TCP/SSL traffic on popular well-known port numbers UDP traffic, TCP traffic on arbitrary port numbers, TCP traffic (non-SSL) on popular well-known port numbers

What does Data Integrity mean?

That users have access to their data and that the data persists without being corrupted or lost.

In most network devices such as a firewall, the network is subject to overload of the capacity of the interface. What is the overload capacity of a firewall in Google's network?

The firewall is virtual, implemented through software defined networking, so there is no physical interface to be overloaded.

Which of these values is globally unique, permanent, and unchangeable, but chosen by the customer?

The project ID

Consider a single hierarchy of GCP resources. Which of these situations is possible? (Choose all that are correct. Choose 3 responses.)

There are two or more organization nodes There is no organization node, and there are no folders. There is no organization node, but there is at least one folder.

What are the steps in the capacity planning cycle?

Allocate. Approve. Deploy. Forecast.

What does the Cloud Natural Language API do?

It analyzes text to reveal its structure and meaning.

Which statement is true of Virtual Machine Instances in Google Compute Engine?

A VM in Compute Engine always maps to a single hardware computer in a rack.

In Kubernetes, what does "pod" refer to?

A group of containers that work together

What is the difference between a proxied and a pass-through load balancer?

A proxied load balancer terminates the incoming connection and initiates a separate connection, a pass-through redirects traffic without terminating it.

Which of these storage needs is best addressed by Cloud Spanner?

A relational database with SQL queries and horizontal scalability

Service accounts are used to provide which of the following? (Choose all that are correct. Choose 3 responses.)

A way to allow users to act with service account permissions A set of predefined permissions Authentication between Google Cloud Platform services

What is TensorFlow?

An open-source software library that's useful for building machine learning applications

You want to gradually decompose a pre-existing monolithic application, not implemented in GCP, into microservices. Which GCP service should you choose?

Apigee Edge

Which compute service lets customers focus on their applications, leaving most infrastructure and provisioning to Google, while still offering various choices of runtime?

App Engine

Which platform would be best for running containers both in the datacenter and in the cloud?

App Engine Flexible Environment

Why is DNS recommended for business continuity and disaster recovery?

Because you can use it to redirect client requests to an alternate backup service by changing the DNS definition.

The design process includes which steps?

Begin simple and iterate. Plan for failure. Measure. *

Which statements are true about BigQuery? Choose all that are true (2 statements).

BigQuery is a good choice for online transaction processing. BigQuery requires that you provision database instances ahead of use. BigQuery lets you run fast SQL queries against large databases. BigQuery is a good choice for data analytics warehousing. Once in BigQuery, data is not accessible from other GCP services.

Which statements are true about BigQuery? Choose all that are true (2 statements).

BigQuery lets you run fast SQL queries against large databases. Once in BigQuery, data is not accessible from other GCP services. BigQuery is a good choice for online transaction processing. BigQuery requires that you provision database instances ahead of use. BigQuery is a good choice for data analytics warehousing.

fully managed no SQL wide column database (maps gmail etc)

Cloud Bigtable

You are building a small application. If possible, you'd like this application's data storage to be at no additional charge. Which service has a free daily quota, separate from any free trials?

Cloud Datastore

fully managed no SQL document database

Cloud Datastore

You want to support developers who are building services in GCP through API logging and monitoring. Which GCP service should you choose?

Cloud Endpoints

Which compute service lets customers supply chunks of code, which get run on-demand in response to events, on infrastructure wholly managed by Google?

Cloud Functions

Name two use cases for Google Cloud Dataproc (Select 2 answers).

Data mining and analysis in datasets of known size Manage datasets of unpredictable size Migrate on-premises Hadoop jobs to the cloud Manage data that arrives in realtime

Name three use cases for the Google Cloud Machine Learning Platform (Select 3 answers).

Data preparation, Fraud detection, Sentiment analysis

Name three use cases for Cloud Pub/Sub (Select 3 answers).

Decoupling systems, Internet of Things applications, Executing ad-hoc SQL queries, Storage of binary web content Analyzing streaming data

What is the service provided by a third party (such as an ISP) that enables you to connect another cloud directly to your Google cloud resources to create hybrid cloud solutions?

Dedicated interconnect.

What is the focus of measurement?

Efficiency. An abstract ratio representing resource utilization. *

What are the two main categories of failures described?

Failure due to loss of resources, and failure due to overload.

True or False: In Google Cloud IAM, if a policy gives you Owner permissions at the project level, your access to an individual resource in the project may be restricted to View by applying a more restrictive policy to that resource.

False

True or False: In Google Cloud IAM, if a policy gives you Owner permissions at the project level, your access to an individual resource in the project may be restricted to View by applying a more restrictive policy to that resource.

False - Policies are a union of the parent and the resource. If a parent policy is less restrictive, it overrides a more restrictive resource policy.

How can a design to improve reliability through failover create an opportunity for overload failure?

If growth occurs and the capacity is not increased to accommodate the new greater load during failover.

Which of these storage needs is best addressed by Cloud Storage?

Immutable binary objects

What is the difference between black box monitoring and white box monitoring?

In black box monitoring you can only monitor external observable events, whereas, in white box monitoring, you can also monitor the system's internal events.

From the bottom up, what are the first three layers in the Site Reliability Engineering pyramid?

Incident Response. Testing and Release Procedures. Capacity Planning.

What is the recommended action to help cope with failure that involves Objectives and Indicators?

Incorporate failure planning including a margin of safety and scheduled downtime into the SLOs and SLIs.

Which form of load balancing enables you to load balance behind an IP address that is only accessible to instances within your Virtual Private Cloud (VPC)?

Internal load balancing.

Name three use cases for Cloud Pub/Sub (Select 3 answers).

Internet of Things applications, Storage of binary web content, Decoupling systems, Executing ad-hoc SQL queries

Which statements are true about App Engine? Choose all that are true (2 correct answers).

It is possible for an App Engine application's daily billing to drop to zero. App Engine charges you based on the resources you pre-allocate rather than based on the resources you use. Developers who write for App Engine do not need to code their applications in any particular way to use the service. App Engine manages the hardware and networking infrastructure required to run your code.

How does a microservices design complicate business logic ?

Key business logic is implemented as cross-services communication. *

Which compute service lets customers deploy their applications in containers that run in clusters on Google's infrastructure?

Kubernetes Engine

What is a key technology for scalable and resilient design that enables both scaling of capacity and redirecting traffic to alternate resources in the event of a failure?

Load balancing.

Name two use cases for Google Cloud Dataproc (Select 2 answers).

Manage data that arrives in realtime Data mining and analysis in datasets of known size Migrate on-premises Hadoop jobs to the cloud Manage datasets of unpredictable size

What is it called when you are trying to make a system more reliable by adding retries and it creates the opportunity for an overload failure?

Positive feedback cycle overload failure.

What advice is given on horizontal scaling design?

Prefer small stateless servers. Keep servers simple; do one thing well.

The course introduces design using a three-tier design model. The three tiers are:

Presentation layer, Business-logic layer, and Data layer. *

What is the difference between IAM primitive roles and IAM predefined roles?

Primitive roles affect all resources in a GCP project. Predefined roles apply to a particular service in a project.

Which of the following describes Cross-project VPC network peering?

Projects that are isolated in separate VPCs can only communicate over the internet and share resources using a tunneled address space.

What are the categories of requirements described in gathering requirements?

Quantitative, qualitative, scaling, and size. *

Name two use cases for Google Cloud Dataflow (Select 2 answers).

Reserved compute instances Manual resource management Extract, Transform, and Load (ETL) Orchestration

Name two use cases for Google Cloud Dataflow (Select 2 answers).

Reserved compute instances Manual resource management Orchestration Extract, Transform, and Load (ETL)

What does "pervasive defense in depth" mean?

Segregation of duties; Google handles some things, others are your responsibility.

Name three use cases for the Google Cloud Machine Learning Platform (Select 3 answers).

Sentiment analysis Data preparation Fraud detection Query architecture Content personalization

Which statements are true about Stackdriver Logging? Choose all that are true (2 statements)

Stackdriver Logging requires the use of a third-party monitoring agent. Stackdriver Logging lets you define uptime checks. Stackdriver Logging lets you view logs from your applications, and filter and search on them. Stackdriver Logging lets you define metrics based on your logs.

You want to define alerts on your GCP resources, such as when health checks fail. Which is the best GCP product to use?

Stackdriver Monitoring

What is it called when information must be preserved to perform a subsequent step?

Stateful. State information is stored. *

What tradeoff occurs with the 12-factor principle of "store state information in the environment"?

Storing state information in the environment is slower than storing it locally on SSD.

What is a lazy deletion strategy?

When a client deletes an object, it is not annihilated immediately, but concealed and preserved for a period. There may be multiple tiers in the deletion strategy that permit different kinds of recovery of the object.

What is a correlated failure?

When a group of related items fail at the same time; the group is a failure domain.

When would you use CSEK (Customer Supplied Encryption Keys) ?

When you have a requirement to use your own AES-256 keys rather than those automatically generated by Google.

What is a cascading failure?

When, due to an overload failure, the system seeks additional resources and spreads the overload until the system loses integrity.

Does Kubernetes Engine support multi-zone containers ?

Yes. It improves availability because if one zone fails, the others can pick up the work. (CORRECT)

Does Google Cloud Platform offer its own tool for building containers (other than the ordinary docker command)?

Yes; the GCP-provided tool is an option, but customers may choose not use it.

Name 3 advantages of using the App Engine Flexible Environment over App Engine Standard.

You can SSH in to your application You can install third-party binaries Google provides automatic in-place security patches Your application can execute code in background threads

Name 3 advantages of using the App Engine Standard Environment over App Engine Flexible.

You can install third-party binaries Billing can drop to zero if your application is idle You can choose any programming language Google provides and maintains runtime binaries

Which statement is true about billing for solutions deployed using Cloud Marketplace (formerly known as Cloud Launcher)?

You pay only for the underlying GCP resources you use, with the possible addition of extra fees for commercially licensed software.