Mock-Test Window

20 Questions

Associate cloud engineer Quiz

1 :-

You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault-tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high. What should you do?

Run A Test Using Simulated Maintenance Events. If The Test Is Successful Use Preemptible N1 Standard Vms When Running Future Jobs Run A Test Using Simulated Maintenance Events. If The Test Is Successful Use N1 Standard Vms When Running Future Jobs. Run A Test Using A Managed Instance Group. If The Test Is Successful Use N1 Standard Vms In The Managed Instance Group When Running Future Jobs. Run A Test Using N1 Standard Vms Instead Of N2. If The Test Is Successful Use N1 Standard Vms When Running Future Jobs

2 :-

You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

Cloud Sql Cloud Spanner Cloud Firestore Cloud Datastore

3 :-

You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

Enable The Node Auto-repair Feature For Your Gke Cluster. Enable The Node Auto-upgrades Feature For Your Gke Cluster Select The Latest Available Cluster Version For Your Gke Cluster. Select “container-optimized Os (cos)" As A Node Image For Your Gke Cluster.

4 :-

Your company uses BigQuery for data warehousing. Over time, many different business units in your company have created 1000+ datasets across hundreds of projects. Your CIO wants you to examine all datasets to find tables that contain an employee_ssn column. You want to minimize effort in performing this task. What should you do?

Go To Data Catalog And Search For Employee_ssn In The Search Box. Write A Shell Script That Uses The Bq Command Line Tool To Loop Through All The Projects In Your Organization. Write A Script That Loops Through All The Projects In Your Organization And Runs A Query On Information_schema.columns View To Find The Employee_ssn Column. Write A Cloud Dataflow Job That Loops Through All The Projects In Your Organization And Runs A Query On Information_schema.columns View To Find Employee_ssn Column.

5 :-

You need to enable traffic between multiple groups of Compute Engine instances that are currently running two different GCP projects. Each group of Compute Engine instances is running in its own VPC. What should you do?

Verify That Both Projects Are In A Gcp Organization. Create A New Vpc And Add All Instances. Verify That Both Projects Are In A Gcp Organization. Share The Vpc From One Project And Request That The Compute Engine Instances In The Other Project Use This Shared Vpc. Verify That You Are The Project Administrator Of Both Projects. Create Two New Vpcs And Add All Instances. Verify That You Are The Project Administrator Of Both Projects. Create A New Vpc And Add All Instances.

6 :-

You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?

Ask Your Ml Team To Add The “accelerator: Gpu" Annotation To Their Pod Specification Recreate All The Nodes Of The Gke Cluster To Enable Gpus On All Of Them. Create Your Own Kubernetes Cluster On Top Of Compute Engine With Nodes That Have Gpus. Dedicate This Cluster To Your Ml Team. Create Your Own Kubernetes Cluster On Top Of Compute Engine With Nodes That Have Gpus. Dedicate This Cluster To Your Ml Team. Add A New Gpu-enabled Node Pool To The Gke Cluster. Ask Your Ml Team To Add The Cloud.google.com/gke -accelerator: Nvidia-tesla-p100 Nodeselector To Their Pod Specification.

7 :-

Your Dataproc cluster runs in a single Virtual Private Cloud (VPC) network in a single subnet with range 172.16.20.128/25. There are no private IP addresses available in the VPC network. You want to add new VMs to communicate with your cluster using the minimum number of steps. What should you do?

Modify The Existing Subnet Range To 172.16.20.0/24. Create A New Secondary Ip Range In The Vpc And Configure The Vms To Use That Range. Create A New Vpc Network For The Vms. Enable Vpc Peering Between The Vms’ Vpc Network And The Dataproc Cluster Vpc Network Create A New Vpc Network For The Vms With A Subnet Of 172.32.0.0/16. Enable Vpc Network Peering Between The Dataproc Vpc Network And The Vms Vpc Network. Configure A Custom Route Exchange

8 :-

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

Run Gcloud Iam Roles Describe Roles/spanner.databaseuser. Add The Users To The Role. Run Gcloud Iam Roles Describe Roles/spanner.databaseuser. Add The Users To A New Group. Add The Group To The Role. Run Gcloud Iam Roles Describe Roles/spanner.viewer --project My-project. Add The Users To The Role. Run Gcloud Iam Roles Describe Roles/spanner.viewer --project My-project. Add The Users To A New Group. Add The Group To The Role.

9 :-

You are asked to set up application performance monitoring on Google Cloud projects A, B, and C as a single pane of glass. You want to monitor CPU, memory, and disk. What should you do?

10 :-

You manage an App Engine Service that aggregates and visualizes data from BigQuery. The application is deployed with the default App Engine Service account. The data that needs to be visualized resides in a different project managed by another team. You do not have access to this project, but you want your application to be able to read data from the BigQuery dataset. What should you do?

Ask The Other Team To Grant Your Default App Engine Service Account The Role Of Bigquery Job User. Ask The Other Team To Grant Your Default App Engine Service Account The Role Of Bigquery Data Viewer. In Cloud Iam Of Your Project Ensure That The Default App Engine Service Account Has The Role Of Bigquery Data Viewer. In Cloud Iam Of Your Project Grant A Newly Created Service Account From The Other Team The Role Of Bigquery Job User In Your Project

11 :-

You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone. You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?

Set The Europe-west1-d Zone As The Default Zone Using The Gcloud Config Subcommand. In The Settings Page For Compute Engine Under Default Location Set The Zone To Europe–west1-d. In The Cli Installation Directory Create A File Called Default.conf Containing Zone=europe–west1–d Create A Metadata Entry On The Compute Engine Page With Key Compute/zone And Value Europe–west1–d.

12 :-

You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

1. In Gke Create A Service Of Type Loadbalancer That Uses The Application's Pods As Backend. 2. Set The Service's Externaltrafficpolicy To Cluster. 3. Configure The Compute Engine Instance To Use The Address Of The Load Balancer That Has Been Created. 1. In Gke Create A Service Of Type Nodeport That Uses The Application's Pods As Backend. 2. Create A Compute Engine Instance Called Proxy With 2 Network Interfaces One In Each Vpc. 3. Use Iptables On This Instance To Forward Traffic From Gce-network To The Gke Nodes. 4. Configure The Compute Engine Instance To Use The Address Of Proxy In Gce-network As Endpoint. 1. In Gke Create A Service Of Type Loadbalancer That Uses The Application's Pods As Backend. 2. Add An Annotation To This Service: Cloud.google.com/load-balancer-type: Internal 3. Peer The Two Vpcs Together. 4. Configure The Compute Engine Instance To Use The Address Of The Load Balancer That Has Been Created. 1. In Gke Create A Service Of Type Loadbalancer That Uses The Application's Pods As Backend. 2. Add A Cloud Armor Security Policy To The Load Balancer That Whitelists The Internal Ips Of The Mig's Instances. 3. Configure The Compute Engine Instance To Use The Address Of The Load Balancer That Has Been Created.

13 :-

You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?

Open The Cloud Spanner Console To Review Configurations Open The Iam & Admin Console To Review Iam Policies For Cloud Spanner Roles. Go To The Stackdriver Monitoring Console And Review Information For Cloud Spanner Go To The Stackdriver Logging Console Review Admin Activity Logs And Filter Them For Cloud Spanner Iam Roles.

14 :-

You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?

Change The Default Region Property Setting In The Existing Gcp Project To Asia-northeast1. Change The Region Property Setting In The Existing App Engine Application From Us-central To Asianortheast1. Create A Second App Engine Application In The Existing Gcp Project And Specify Asia-northeast1 As The Region To Serve Your Application. Create A New Gcp Project And Create An App Engine Application Inside This New Project. Specify Asia-northeast1 As The Region To Serve Your Application.

15 :-

You are creating a Google Kubernetes Engine (GKE) cluster with a cluster autoscaler feature enabled. You need to make sure that each node of the cluster will run a monitoring pod that sends container metrics to a third-party monitoring solution. What should you do?

Deploy The Monitoring Pod In A Statefulset Object Deploy The Monitoring Pod In A Daemonset Object Reference The Monitoring Pod In A Deployment Object. Reference The Monitoring Pod In A Cluster Initializer At The Gke Cluster Creation Time

16 :-

You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?

1. Create A Cloud Function That Uses A Cloud Pub/sub Trigger On That Topic. 2. Call Your Application On Cloud Run From The Cloud Function For Every Message. 1. Grant The Pub/sub Subscriber Role To The Service Account Used By Cloud Run. 2. Create A Cloud Pub/sub Subscription For That Topic. 3. Make Your Application Pull Messages From That Subscription. 1. Create A Service Account. 2. Give The Cloud Run Invoker Role To That Service Account For Your Cloud Run Application. 3. Create A Cloud Pub/sub Subscription That Uses That Service Account And Uses Your Cloud Run Application As The Push Endpoint. 1. Deploy Your Application On Cloud Run On Gke With The Connectivity Set To Internal. 2. Create A Cloud Pub/sub Subscription For That Topic. 3. In The Same Google Kubernetes Engine Cluster As Your Application Deploy A Container That Takes The Messages And Sends Them To Your Application.

17 :-

You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google-recommended practices to obtain the combined logs for all projects. What should you do?

Navigate To Stackdriver Logging And Select Resource.labels.project_id="*" Create A Stackdriver Logging Export With A Sink Destination To A Bigquery Dataset. Configure The Table Expiration To 60 Days Create A Stackdriver Logging Export With A Sink Destination To Cloud Storage. Create A Lifecycle Rule To Delete Objects After 60 Days. Configure A Cloud Scheduler Job To Read From Stackdriver And Store The Logs In Bigquery. Configure The Table Expiration To 60 Days.

18 :-

You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?

Create A Cloud Memorystore For Redis Instance With 32-gb Capacity. Run It On Compute Engine And Choose A Custom Instance Type With 6 Vcpus And 32 Gb Of Memory Package It In A Container Image And Run It On Kubernetes Engine Using N1-standard-32 Instances As Nodes. Run It On Compute Engine Choose The Instance Type N1-standard-1 And Add An Ssd Persistent Disk Of 32 Gb.

19 :-

Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?

Generate A New Ssh Key Pair. Give The Private Key To Each Member Of Your Team. Configure The Public Key In The Metadata Of Each Instance. Ask Each Member Of The Team To Generate A New Ssh Key Pair And To Send You Their Public Key. Use A Configuration Management Tool To Deploy Those Keys On Each Instance. Ask Each Member Of The Team To Generate A New Ssh Key Pair And To Add The Public Key To Their Google Account. Grant The “compute.osadminlogin" Role To The Google Group Corresponding To This Team. Generate A New Ssh Key Pair. Give The Private Key To Each Member Of Your Team. Configure The Public Key As A Project-wide Public Ssh Key In Your Cloud Platform Project And Allow Project-wide Public Ssh Keys On Each Instance.

20 :-

You are building a product on top of Google Kubernetes Engine (GKE). You have a single GKE cluster. For each of your customers, a Pod is running in that cluster, and your customers can run arbitrary code inside their Pod. You want to maximize the isolation between your customers’ Pods. What should you do?

Use Binary Authorization And Whitelist Only The Container Images Used By Your Customers’ Pods. Use The Container Analysis Api To Detect Vulnerabilities In The Containers Used By Your Customers’ Pods. Create A Gke Node Pool With A Sandbox Type Configured To Gvisor. Add The Parameter Runtimeclassname: Gvisor To The Specification Of Your Customers’ Pods. Use The Cos_containerd Image For Your Gke Nodes. Add A Nodeselector With The Value Cloud.google.com/gke-os-distribution: Cos_containerd To The Specification Of Your Customers’ Pods

Back

Associate cloud engineer Quiz

🏅