You want to use the Cloud Shell to copy files to your Cloud Storage bucket. Which Cloud SDK command should you use? bq Cloud Storage Browser gcloud gsutil.
Jane will manage objects in Cloud Storage for the Cymbal Superstore. She needs to have access to the proper permissions for every project across the organization. What should you do? Add Jane to a group that has the roles/storage.objectAdmin role assigned at the organizational level Assign Jane the roles/editor at the organizational level. Assign Jane the roles/storage.objectCreator on every project. Assign Jane the roles/viewer on each project and the roles/storage.objectCreator for each bucket.
How are resource hierarchies organized in Google Cloud? Organization, Project, Resource, Folder Resource, Folder, Organization, Project Organization, Folder, Project, Resource Project, Organization, Folder, Resource.
Pick two choices, from the options below, that provide a command line interface to Google Cloud. Google Cloud console Cloud Shell Cloud Mobile App REST-based API Cloud SDK.
Fiona is the billing administrator for the project associated with Cymbal Superstore’s eCommerce application. Jeffrey, the marketing department lead, wants to receive emails related to budget alerts. Jeffrey should have access to no additional billing information. What should you do? Add Jeffrey and Fiona to the budget scope custom email delivery dialog. Send alerts to a Pub/Sub topic that Jeffrey is subscribed to. Change the budget alert default threshold rules to include Jeffrey as a recipient. Use Cloud Monitoring notification channels to send Jeffrey an email alert.
The Operations Department at Cymbal Superstore wants to provide managers access to information about VM usage without allowing them to make changes that would affect the state. You assign them the Compute Engine Viewer role. Which two permissions will they receive? compute.images.list compute.images.get compute.images.create compute.images.setIAM compute.images.update.
How are billing accounts applied to projects in Google Cloud? (Pick two). A project and its resources can be tied to more than one billing account. A project and its resources can only be tied to one billing account. Set up Cloud Billing to pay for usage costs in Google Cloud projects and Google Workspace accounts. A billing account can be linked to one or more projects.
You need to add new groups of employees in Cymbal Superstore’s production environment. You need to consider Google’s recommendation of using least privilege. What should you do? Grant custom roles to individual users and implement basic roles at the resource level. Grant the least restrictive basic roles to most services and grant predefined and custom roles only when necessary. Grant the most restrictive basic role to most services, grant predefined or custom roles as necessary. Grant predefined and custom roles that provide necessary permissions and grant basic roles only where needed.
What Google Cloud project attributes can be changed? The Project ID. The Project Name. The Project Number. The Project Category.
Stella is a new member of a team in your company who has been put in charge of monitoring VM instances in the organization. Stella will need the required permissions to perform this role. How should you grant her those permissions? Assign Stella a roles/compute.viewer role. Assign the “viewer” policy to Stella. Assign Stella compute.instances.get permissions on all of the projects she needs to monitor. Add Stella to a Google Group in your organization. Bind that group to roles/compute.viewer.
Which Google Cloud interface allows for scripting actions in a set of command line executables? REST API. Cloud Mobile App. Google Cloud console. Cloud Shell.
What is the lowest level basic role that gives you permissions to change resource state? Viewer. Owner. Administrator. Editor.
You want to deploy a microservices application. You need full control of how you manage containers, reliability, and autoscaling, but don’t want or need to manage the control plane. Which compute option should you use? Cloud Run Compute Engine Google Kubernetes Engine App Engine.
Cymbal Superstore is piloting an update to its ecommerce app for the flagship store in Minneapolis, Minnesota. The app is implemented as a three-tier web service with traffic originating from the local area and resources dedicated for it in us-central1. You need to configure a secure, low-cost network load-balancing architecture for it. How do you proceed? Implement a premium tier pass-through external https load balancer connected to the web tier as the frontend and a regional internal load balancer between the web tier and backend. Configure a proxied SSL load balancer connected to the web tier as the frontend and a standard tier internal TCP/UDP load balancer between the web tier and the backend. Configure a standard tier proxied external https load balancer connected to the web tier as a frontend and a regional internal load balancer between the web tier and the backend. Implement a proxied external TCP/UDP network load balancer connected to the web tier as the frontend and a premium network tier ssl load balancer between the web tier and the backend.
Which Google Cloud load balancing option runs at Layer 7 of the TCP stack? Global SSL Proxy Regional Network Global http(s) Global TCP Proxy.
An application running on a highly-customized version of Ubuntu needs to be migrated to Google Cloud. You need to do this in the least amount of time with minimal code changes. How should you proceed? Implement a Kubernetes cluster and create pods to enable your app. Deploy the existing application to App Engine. Deploy your application in a container image to Cloud Run. Create Compute Engine Virtual Machines and migrate the app to that infrastructure.
Cymbal Superstore has a need to populate visual dashboards with historical time-based data. This is an analytical use-case. Which two storage solutions could they use? https://cloud.google.com/bigtable/docs/overview#other-storage-options Cloud Bigtable Cloud SQL Cloud Storage Cloud Firestore BigQuery.
Cymbal Superstore’s supply chain application frequently analyzes large amounts of data to inform business processes and operational dashboards. What storage class would make sense for this use case? Coldline Nearline Archive Standard.
The projected amount of cloud storage required for Cymbal Superstore to enable users to post pictures for project reviews is 10 TB of immediate access storage in the US and 30 TB of storage for historical posts in a bucket located near Cymbal Superstore’s headquarters. The contents of this bucket will need to be accessed once every 30 days. You want to estimate the cost of these storage resources to ensure this is economically feasible. What should you do? Use the pricing calculator to estimate the price for 10 TB of multi-region Standard storage, 30 TB for regional Nearline, and egress charges for reads from the bucket. Use the pricing calculator to estimate the costs for 10 TB of regional Standard storage, 30 TB of regional Coldline storage, and egress charges for reads from storage. Use the pricing calculator to estimate the price for 10 TB of multi-region Standard storage, 30 TB for regional Coldline storage, and ingress charges for posts to the bucket. Use the pricing calculator to estimate the price for 10 TB of regional Standard storage, 30 TB of regional Nearline storage, and ingress charges for posts to the bucket.
Cymbal Superstore decides to pilot a cloud application for their point of sale system in their flagship store. You want to focus on code and develop your solution quickly, and you want your code to be portable. How do you proceed? Package your code to a container image and post it to Cloud Run. Implement a deployment manifest and run kubectl apply on it in Google Kubernetes Engine. SSH into a Compute Engine VM and execute your code. Code your solution in Cloud Functions.
Cymbal Superstore needs to analyze whether they met quarterly sales projections. Analysts assigned to run this query are familiar with SQL. What data solution should they implement? Cloud SQL BigQuery Cloud Spanner Cloud Firestore.
Cymbal Superstore decides to migrate their supply chain application to Google Cloud. You need to configure specific operating system dependencies. What should you do? Implement an application using code on App Engine. Implement an application using containers on Cloud Run. Implement an application using containers on Google Kubernetes Engine. Implement an application using virtual machines on Compute Engine.
Which serverless option is based on developing and executing small snippets of code? Dataflow Cloud Run BigQuery Cloud Functions.
Which storage class is designed for long term storage has a 365 day minimum storage agreement, and a lower storage price as compared to other storage types? Coldline storage Archive storage Nearline storage Standard storage.
Cymbal Superstore asks you to implement Cloud SQL as a database backend to their supply chain application. You want to configure automatic failover in case of a zone outage. You decide to use the gcloud sql instances create command set to accomplish this. Which gcloud command line argument is required to configure the stated failover capability as you create the required instances? --availability-type --secondary-zone --master-instance-name --replica-type.
You need to analyze and act on files being added to a Cloud Storage bucket. Your programming team is proficient in Python. The analysis you need to do takes at most 5 minutes. You implement a Cloud Function to accomplish your processing and specify a trigger resource pointing to your bucket. How should you configure the --trigger-event parameter using gcloud? --trigger-event google.storage.object.add --trigger-event google.storage.object.change --trigger-event google.storage.object.finalize --trigger-event google.storage.object.create.
What action does the terraform apply command perform? Sets up resources requested in the terraform config file. Shows a preview of resources that will be created. Downloads the latest version of the terraform provider. Verifies syntax of terraform config file.
Cymbal Superstore’s sales department has a medium-sized MySQL database. This database includes user-defined functions and is used internally by the marketing department at Cymbal Superstore HQ. The sales department asks you to migrate the database to Google Cloud in the most timely and economical way. What should you do? Use gcloud to implement a Compute Engine instance with an E2-standard-8 machine type, install, and configure MySQL. Find a MySQL machine image in Cloud Marketplace and configure it to meet your needs. Configure a Compute Engine VM with an N2 machine type, install MySQL, and restore your data to the new instance. Implement a database instance using Cloud SQL, back up your local data, and restore it to the new instance.
Cymbal Superstore’s marketing department needs to load some slowly changing data into BigQuery. The data arrives hourly in a Cloud Storage bucket. You want to minimize cost and implement this in the fewest steps. What should you do? Implement a bq load command in a command line script and schedule it with cron. Use the BigQuery data transfer service to schedule a transfer between your bucket and BigQuery. Read the data from your bucket by using the BigQuery streaming API in a program. Create a Cloud Function to push data to BigQuery through a Dataflow pipeline.
You need to quickly deploy a containerized web application on Google Cloud. You know the services you want to be exposed. You do not want to manage infrastructure. You only want to pay when requests are being handled and need support for custom packages. What technology meets these needs? Cloud Run App Engine flexible environment App Engine standard environment Cloud Functions.
The development team for the supply chain project is ready to start building their new cloud app using a small Kubernetes cluster for the pilot. The cluster should only be available to team members and does not need to be highly available. The developers also need the ability to change the cluster architecture as they deploy new capabilities. How would you implement this? Implement an autopilot cluster in us-central1-a with a default pool and an Ubuntu image. Implement a private standard regional cluster in us-central1 with a default pool and container-optimized image type. Implement an autopilot cluster in us-central1 with an Ubuntu image type. Implement a private standard zonal cluster in us-central1-a with a default pool and an Ubuntu image.
You require a Cloud Storage bucket serving users in New York City. There is a need for geo-redundancy. You do not plan on using ACLs. What CLI command do you use? Run a gsutil mb command specifying a multi-regional location and an option to turn ACL evaluation off. Run a gsutil mb command specifying a dual-region bucket and an option to turn ACL evaluation off. Run a gsutil mb command specifying a dual-region bucket and accepting defaults for the other mb settings. Run a gcloud mb command specifying the name of the bucket and accepting defaults for the other mb settings.
Which Virtual Private Cloud (VPC) network type allows you to fully control IP ranges and the definition of regional subnets? Default Project network Custom mode network An auto mode network converted to a custom network Auto mode network.
The backend of Cymbal Superstore’s e-commerce system consists of managed instance groups. You need to update the operating system of the instances in an automated way using minimal resources. What do you do? Create a new instance template. Click Update VMs. Set the update type to Opportunistic. Click Start. Abandon each of the instances in the managed instance group. Delete the instance template, replace it with a new one, and recreate the instances in the managed group. Create a new instance template, then click Update VMs. Set the update type to PROACTIVE. Click Start. Create a new instance template. Click Update VMs. Set max surge to 5. Click Start.
Which services are based on logic implemented in containers? (Pick two). Compute Engine Google Kubernetes Engine Cloud Functions Cloud Run Manages Instance Groups.
Which data storage service is a unique globally available, horizontally scalable database with relational semantics? Cloud Spanner BigQuery Cloud SQL Bigtable.
Cymbal Superstore’s GKE cluster requires an internal http(s) load balancer. You are creating the configuration files required for this resource. What is the proper setting for this scenario? Annotate your ingress object with an ingress.class of “gce.” Implement custom static routes in your VPC. Annotate your service object with a “neg" reference. Configure your service object with a type: LoadBalancer.
What is the declarative way to initialize and update Kubernetes objects? kubectl create kubectl apply kubectl replace kubectl run.
You want to view a description of your available snapshots using the command line interface (CLI). What gcloud command should you use? gcloud snapshots list gcloud compute list snapshots gcloud compute snapshots get gcloud compute snapshots list.
Cymbal Superstore’s supply chain management system has been deployed and is working well. You are tasked with monitoring the system’s resources so you can react quickly to any problems. You want to ensure the CPU usage of each of your Compute Engine instances in us-central1 remains below 60%. You want an incident created if it exceeds this value for 5 minutes. You need to configure the proper alerting policy for this scenario. What should you do? Choose resource type of VM instance and metric of CPU utilization, condition trigger all time series violates, condition is above, threshold is .60 for 5 minutes. Choose resource type of VM instance and metric of CPU load, condition trigger if any time series violates, condition is below, threshold is .60, for 5 minutes. Choose resource type of VM instance, and metric of CPU utilization, condition trigger if any time series violates, condition is below, threshold is .60 for 5 minutes. Choose resource type of VM instance and metric of CPU utilization, condition trigger if any time series violates, condition is above, threshold is .60 for 5 minutes.
Which of the following tasks are part of the process when configuring a managed instance group? (Pick two). Specifying Persistent disks Configuring the operating system Providing Number of instances Choosing instance Machine type Defining Health checks.
Cymbal Superstore has a subnetwork called mysubnet with an IP range of 10.1.2.0/24. You need to expand this subnet to include enough IP addresses for at most 2000 users or devices. What should you do? gcloud networks subnets expand-ip-range mysubnet --region us-central1 --prefix-length 21 gcloud compute networks subnets expand-ip-range mysubnet --region us-cetnral1 --prefix-length 22 gcloud compute networks subnets expand-ip-range mysubnet --region us-central1 --prefix-length 21 gcloud compute networks subnets expand-ip-range mysubnet --region us-central1 --prefix-length 20.
What Kubernetes object provides access to logic running in your cluster via endpoints that you define? Pods Deployments Services Pod template.
You have a scheduled snapshot you are trying to delete, but the operation returns an error. What should you do to resolve this problem? Delete the object the snapshot was created from. Delete the downstream incremental snapshots before deleting the main reference. Detach the snapshot schedule before deleting it. Restore the snapshot to a persistent disk before deleting it.
You have a Cloud Run service with a database backend. You want to limit the number of connections to your database. What should you do? Set CPU Utilization. Set Max instances Set Concurrency settings. Set Min instances.
You want to implement a lifecycle rule that changes your storage type from standard to nearline after a specific date. What conditions should you use? (Pick two). Age IsLive MatchesStorageClass CreatedBefore NumerofNewerVersions.
Which Cloud Run autoscaling setting should you set if you want to limit cost? CPU Utilization Concurrency settings Min instances Max instances.
What GKE object implements an http(s) load balancer? Service Ingress Pod Deployment.
Cymbal Superstore is implementing a mobile app for end users to track deliveries that are en route to them. The app needs to access data about truck location from Pub/Sub using Google recommended practices. What kind of credentials should you use? OAuth 2.0 client Environment provided service account API key Service account key.
Which of the scenarios below is an example of a situation where you should use a service account?
To directly access user data For interactive analysis For individual GKE pods For development environments.
Which Cloud Audit log is disabled by default with a few exceptions? Policy Denied audit logs Data Access audit logs Admin Activity audit logs System Event audit logs.
You need to configure access to Cloud Spanner from the GKE cluster that is supporting Cymbal Superstore’s ecommerce microservices application. You want to specify an account type to set the proper permissions. What should you do? Assign permissions through service account referenced by the application Assign permissions through a Google Workspace account referenced by the application Assign permissions to a Google account referenced by the application Assign permissions through a Cloud Identity account referenced by the application.
Outline where Cloud Audit logs can be accessed: in the logging tab of the operations interface Link: https://cloud.google.com/storage/docs/audit-logging You are configuring audit logging for Cloud Storage. You want to know when objects are added to a bucket. Which type of audit log entry should you monitor? DATA_WRITE log entries DATA_READ log entries ADMIN_READ log entries Admin Activity log entries.
You are trying to assign roles to the dev and prod projects of Cymbal Superstore’s e-commerce app but are receiving an error when you try to run set-iam policy. The projects are organized into an ecommerce folder in the Cymbal Superstore organizational hierarchy. You want to follow best practices for the permissions you need while respecting the practice of least privilege. What should you do? Ask your administrator for resourcemanager.projects.setIamPolicy roles for each project Ask your administrator for the roles/iam.securityAdmin role in IAM Ask your administrator for the roles/resourcemanager.organizationAdmin for Cymbal Superstore Ask your administrator for the roles/resourcemanager.folderIamAdmin for the ecommerce folder.
You have a custom role implemented for administration of the dev/test environment for Cymbal Superstore’s transportation management application. You are developing a pilot to use Cloud Run instead of Cloud Functions. You want to ensure your administrators have the correct access to the new resources. What should you do? Create a new role with needed permissions and migrate users to it. Copy the existing role, add the new permissions to the copy, and delete the old role Delete the custom role and recreate a new custom role with required permissions Make the change to the custom role locally and run an update on the custom role.
What kind of account is meant for machine-to-machine communication in Google Cloud? Google Workspace account Service account User account Cloud Identity account.
You are authenticating an application to service APIs. Both resources are internal to the Google Cloud environment. What type of credentials should you use? User account credentials Temporary credentials API keys Locally stored keys.
|
