Quiz
Untitled
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (39)
1You migrated your applications to Google Cloud Platform and kept your existing monitoring platform. You now find that your notification system is too slow for time critical problems.
What should you do?- AMigrate some traffic back to your old platform and perform AB testing on the two platforms concurrently.
- BReplace your entire monitoring platform with Stackdriver.
- CInstall the Stackdriver agents on your Compute Engine instances.
- DUse Stackdriver to capture and alert on logs, then ship them to your existing platform.
2For this question, refer to the HipLocal case study.
HipLocal's application uses Cloud Client Libraries to interact with Google Cloud. HipLocal needs to configure authentication and authorization in the Cloud Client Libraries to implement least privileged access for the application. What should they do?- ACreate an API key. Use the API key to interact with Google Cloud.
- BUse the default compute service account to interact with Google Cloud.
- CCreate a service account for the application and for each Google Cloud API used by the application.
Export and deploy the private keys used by the application. Use the service account with one Google Cloud API to interact with Google Cloud. - DCreate a service account for the application. Export and deploy the private key for the application. Use the service account to interact with Google Cloud.
3You are developing an ecommerce web application that uses App Engine standard environment and Memorystore for Redis. When a user logs into the app, the application caches the user's information (e.g., session, name, address, preferences), which is stored for quick retrieval during checkout.
While testing your application in a browser, you get a 502 Bad Gateway error. You have determined that the application is not connecting to Memorystore. What is the reason for this error?- AThe firewall rule allowing a connection between App Engine and Memorystore was removed during an infrastructure update by the DevOps team.
- BYour Memorystore for Redis instance was deployed without a public IP address.
- CYou configured your Serverless VPC Access connector in a different region than your App Engine instance.
- DYou configured your application to use a Serverless VPC Access connector on a different subnet in a different availability zone than your App Engine instance.
4You are a lead developer working on a new retail system that runs on Cloud Run and Firestore. A web UI requirement is for the user to be able to browse through alt products. A few months after go-live, you notice that Cloud Run instances are terminated with HTTP 500: Container instances are exceeding memory limits errors during busy times This error coincides with spikes in the number of Firestore queries You need to prevent Cloud Run from crashing and decrease the number of Firestore queries. You want to use a solution that optimizes system performance What should you do?
- AModify the query that returns the product list using integer offsets
- BModify the query that returns the product list using cursors with limits
- CModify the Cloud Run configuration to increase the memory limits
- DCreate a custom jndex over the products
5You are a developer at a large organization. You have an application written in Go running in a production Google Kubernetes Engine (GKE) cluster. You need to add a new feature that requires access to BigQuery.
You want to grant BigQuery access to your GKE cluster following Google-recommended best practices. What should you do?- ACreate a Google service account with BigQuery access. Add the Google service account JSON key to Secret Manager, and use an init container to access the secret for the application to use.
- BCreate a Google service account and a Kubernetes service account. Configure Workload Identity on the GKE cluster, and reference the Kubernetes service account on the application Deployment.
- CCreate a Google service account with BigQuery access. Add the Google service account JSON key as a Kubernetes secret, and configure the application to use this secret.
- DCreate a Google service account with BigQuery access. Add the JSON key to Secret Manager, and use the Go client library to access the JSON key.
6HipLocal is configuring their access controls.
Which firewall configuration should they implement?- AAllow all traffic on port 443 into the network.
- BBlock all traffic on port 443.
- CAllow all traffic into the network.
- DAllow traffic on port 443 for a specific tag.
7You want to notify on-call engineers about a service degradation in production while minimizing development time.
What should you do?- AUse Cloud Pub/Sub to monitor resources and raise alerts.
- BUse Stackdriver Error Reporting to capture errors and raise alerts.
- CUse Cloud Function to monitor resources and raise alerts.
- DUse Stackdriver Monitoring to monitor resources and raise alerts.
8You are deploying your application on a Compute Engine instance that communicates with Cloud SQL. You will use Cloud SQL Proxy to allow your application to communicate to the database using the service account associated with the application's instance. You want to follow the Google-recommended best practice of providing minimum access for the role assigned to the service account. What should you do?
- AAssign the Cloud SQL Client role.
- BAssign the Cloud SQL Editor role.
- CAssign the Project Owner role.
- DAssign the Project Editor role.
9Your application is logging to Stackdriver. You want to get the count of all requests on all /api/alpha/* endpoints.
What should you do?- AExport the logs to Cloud Storage and count lines matching /api/alphA.
- BExport the logs to Cloud Pub/Sub and count lines matching /api/alphA.
- CAdd a Stackdriver counter metric for path:/api/alpha/.
- DAdd a Stackdriver counter metric for endpoint:/api/alpha/*.
10Your organization has recently begun an initiative to replatform their legacy applications onto Google Kubernetes Engine. You need to decompose a monolithic application into microservices. Multiple instances have read and write access to a configuration file, which is stored on a shared file system. You want to minimize the effort required to manage this transition, and you want to avoid rewriting the application code.
What should you do?- ACreate a new ConfigMap and volumeMount to store the contents of the configuration file.
- BCreate a new Cloud Storage bucket, and mount it via FUSE in the container.
- CCreate a new persistent disk, and mount the volume as a shared PersistentVolume.
- DCreate a new Filestore instance, and mount the volume as an NFS PersistentVolume.
11You have an application in production. It is deployed on Compute Engine virtual machine instances controlled by a managed instance group. Traffic is routed to the instances via a HTTP(s) load balancer. Your users are unable to access your application. You want to implement a monitoring technique to alert you when the application is unavailable.
Which technique should you choose?- ASmoke tests
- BManaged instance group - heath checks
- CCloud Load Balancing - heath checks
- DStackdriver uptime checks
12You have an ecommerce application hosted in Google Kubernetes Engine (GKE) that receives external requests and forwards them to third-party APIs external to Google Cloud. The third-party APIs are responsible for credit card processing, shipping, and inventory management using the process shown in the diagram.
Your customers are reporting that the ecommerce application is running slowly at unpredictable times. The application doesn't report any metrics You need to determine the cause of the inconsistent performance What should you do?
- AInstall the Ops Agent inside your container and configure it to gather application metrics.
- BInstall the OpenTelemetry library for your respective language, and instrument your application.
- CModify your application to read and forward the x-Cloud-Trace-context header when it calls the downstream services D Enable Managed Service for Prometheus on the GKE cluster to gather application metrics.
13You recently joined a new team that has a Cloud Spanner database instance running in production. Your manager has asked you to optimize the Spanner instance to reduce cost while maintaining high reliability and availability of the database. What should you do?
- AUse Cloud Monitoring to monitor the CPU utilization, and reduce Spanner processing units by small increments until you find the minimum capacity required.
- BUse Snapshot Debugger to check for application errors, and reduce Spanner processing units by small increments until you find the minimum capacity required.
- CUse Cloud Trace to monitor the requests per sec of incoming requests to Spanner, and reduce Spanner processing units by small increments until you find the minimum capacity required.
- DUse Cloud Logging to check for error logs, and reduce Spanner processing units by small increments until you find the minimum capacity required.
14You are running a web application on Google Kubernetes Engine that you inherited. You want to determine whether the application is using libraries with known vulnerabilities or is vulnerable to XSS attacks. Which service should you use?
- AGoogle Cloud Armor
- BError Reporting
- CDebugger
- DWeb Security Scanner
15For this question, refer to the HipLocal case study.
Which Google Cloud product addresses HipLocal's business requirements for service level indicators and objectives?- ACloud Profiler
- BCloud Monitoring
- CCloud Trace
- DCloud Logging
16Which service should HipLocal use to enable access to internal apps?
- ACloud Armor
- BCloud VPN
- CVirtual Private Cloud
- DCloud Identity-Aware Proxy
17You are responsible for deploying a new API. That API will have three different URL paths:
* https://yourcompany.com/students
* https://yourcompany.com/teachers
* https://yourcompany.com/classes
You need to configure each API URL path to invoke a different function in your code. What should you do?- ACreate three Cloud Functions as three backend services exposed using an HTTPS load balancer.
- BCreate one Cloud Function exposed directly.
- CCreate three Cloud Functions exposed directly.
- DCreate one Cloud Function as a backend service exposed using an HTTPS load balancer.
18You are building a new API. You want to minimize the cost of storing and reduce the latency of serving images.
Which architecture should you use?- ATransfer Appliance backed by Cloud Filestore
- BCompute Engine backed by Persistent Disk
- CCloud Content Delivery Network (CDN) backed by Cloud Storage
- DApp Engine backed by Cloud Storage
19You work for an organization that manages an ecommerce site. Your application is deployed behind a global HTTP(S) load balancer. You need to test a new product recommendation algorithm. You plan to use A/B testing to determine the new algorithm's effect on sales in a randomized way. How should you test this feature?
- AEnable the new recommendation feature flag on a single instance.
- BSplit traffic between versions using weights.
- CMirror traffic to the new version of your application.
- DUse HTTP header-based routing.
20Which database should HipLocal use for storing user activity?
- ACloud SQL
- BCloud Datastore
- CCloud Spanner
- DBigQuery
21In order for HipLocal to store application state and meet their stated business requirements, which database service should they migrate to?
- ACloud Datastore
- BCloud Spanner
- CSeparate Cloud SQL clusters for each region
- DCloud Memorystore as a cache
22Your application is deployed on hundreds of Compute Engine instances in a managed instance group (MIG) in multiple zones. You need to deploy a new instance template to fix a critical vulnerability immediately but must avoid impact to your service. What setting should be made to the MIG after updating the instance template?
- ASet the Update mode to Opportunistic.
- BSet the Maximum Unavailable to 100%.
- CSet the Minimum Wait time to 0 seconds.
- DSet the Max Surge to 100%.
23You are designing a deployment technique for your new applications on Google Cloud. As part of your deployment planning, you want to use live traffic to gather performance metrics for both new and existing applications. You need to test against the full production load prior to launch. What should you do?
- AUse canary deployment
- BUse A/B testing with traffic mirroring during deployment
- CUse rolling updates deployment
- DUse blue/green deployment
24Your operations team has asked you to create a script that lists the Cloud Bigtable, Memorystore, and Cloud SQL databases running within a project. The script should allow users to submit a filter expression to limit the results presented. How should you retrieve the data?
- AUse the HBase API, Redis API, and MySQL connection to retrieve database lists. Combine the results, and then apply the filter to display the results
- BRun gcloud bigtable instances list, gcloud redis instances list, and gcloud sql databases list. Use --filter flag with each command, and then display the results
- CRun gcloud bigtable instances list, gcloud redis instances list, and gcloud sql databases list. Use a filter within the application, and then display the results
- DUse the HBase API, Redis API, and MySQL connection to retrieve database lists. Filter the results individually, and then combine them to display the results
25You recently migrated a monolithic application to Google Cloud by breaking it down into microservices. One of the microservices is deployed using Cloud Functions. As you modernize the application, you make a change to the API of the service that is backward-incompatible. You need to support both existing callers who use the original API and new callers who use the new API. What should you do?
- ALeave the original Cloud Function as-is and deploy a second Cloud Function with the new API. Use a load balancer to distribute calls between the versions.
- BLeave the original Cloud Function as-is and deploy a second Cloud Function that includes only the changed API. Calls are automatically routed to the correct function.
- CLeave the original Cloud Function as-is and deploy a second Cloud Function with the new API. Use Cloud Endpoints to provide an API gateway that exposes a versioned API.
- DRe-deploy the Cloud Function after making code changes to support the new API. Requests for both versions of the API are fulfilled based on a version identifier included in the call.
26You are creating an App Engine application that writes a file to any user's Google Drive.
How should the application authenticate to the Google Drive API?- AWith an OAuth Client ID that uses the https://www.googleapis.com/auth/drive.file scope to obtain an access token for each user.
- BWith the App Engine service account and https://www.googleapis.com/auth/drive.file scope that generates a signed JWT.
- CWith the App Engine service account with delegated domain-wide authority.
- DWith an OAuth Client ID with delegated domain-wide authority.
27You recently developed a new application. You want to deploy the application on Cloud Run without a Dockerfile. Your organization requires that all container images are pushed to a centrally managed container repository. How should you build your container using Google Cloud services? (Choose two.)
- AInclude the --source flag with the gcloud run deploy CLI command.
- BInclude the --platform=kubernetes flag with the gcloud run deploy CLI command.
- CSubmit a Cloud Build job to push the image.
- DUse the pack build command with pack CLI.
- EPush your source code to Artifact Registry.
28Your company has deployed a new API to a Compute Engine instance. During testing, the API is not behaving as expected. You want to monitor the application over 12 hours to diagnose the problem within the application code without redeploying the application. Which tool should you use?
- ACloud Debugger snapshots
- BCloud Monitoring
- CCloud Debugger logpoints
- DCloud Trace
29You are developing a marquee stateless web application that will run on Google Cloud. The rate of the incoming user traffic is expected to be unpredictable, with no traffic on some days and large spikes on other days. You need the application to automatically scale up and down, and you need to minimize the cost associated with running the application. What should you do?
- ABuild the application in Python with Firestore as the database. Deploy the application to a Compute Engine managed instance group with autoscaling.
- BBuild the application in Python with CloudSQL as the database. Deploy the application to App Engine standard environment.
- CBuild the application in Python with Firestore as the database. Deploy the application to Cloud Run.
- DBuild the application in C# with Firestore as the database. Deploy the application to App Engine flexible environment.
30You are developing an application that will allow users to read and post comments on news articles. You want to configure your application to store and display user-submitted comments using Firestore. How should you design the schema to support an unknown number of comments and articles?
- AAdd each comment to an array property on the article.
- BStore each comment in a document, and add the comment's key to an array property on the user profile.
- CStore each comment in a document, and add the comment's key to an array property on the article.
- DStore each comment in a subcollection of the article.
31Your company is planning to migrate their on-premises Hadoop environment to the cloud. Increasing storage cost and maintenance of data stored in HDFS is a major concern for your company. You also want to make minimal changes to existing data analytics jobs and existing architecture. How should you proceed with the migration?
- AMigrate your data stored in Hadoop to BigQuery. Change your jobs to source their information from BigQuery instead of the on-premises Hadoop environment.
- BCreate Compute Engine instances with HDD instead of SSD to save costs. Then perform a full migration of your existing environment into the new one in Compute Engine instances.
- CCreate a Cloud Dataproc cluster on Google Cloud Platform, and then migrate your Hadoop environment to the new Cloud Dataproc cluster. Move your HDFS data into larger HDD disks to save on storage costs.
- DCreate a Cloud Dataproc cluster on Google Cloud Platform, and then migrate your Hadoop code objects to the new cluster. Move your data to Cloud Storage and leverage the Cloud Dataproc connector to run jobs on that data.
32You recently developed a new service on Cloud Run. The new service authenticates using a custom service and then writes transactional information to a Cloud Spanner database. You need to verify that your application can support up to 5,000 read and 1,000 write transactions per second while identifying any bottlenecks that occur. Your test infrastructure must be able to autoscale. What should you do?
- ACreate a Google Kubernetes Engine cluster running the Locust or JMeter images to dynamically generate load tests. Analyze the results using Cloud Trace.
- BBuild a test harness to generate requests and deploy it to Cloud Run. Analyze the VPC Flow Logs using Cloud Logging.
- CCreate a Compute Engine instance that uses a LAMP stack image from the Marketplace, and use Apache Bench to generate load tests against the service. Analyze the results using Cloud Trace.
- DCreate a Cloud Task to generate a test load. Use Cloud Scheduler to run 60,000 Cloud Task transactions per minute for 10 minutes. Analyze the results using Cloud Monitoring.
33You are using Cloud Build to build and test application source code stored in Cloud Source Repositories. The build process requires a build tool not available in the Cloud Build environment.
What should you do?- ABuild a custom cloud builder image and reference the image in your build steps.
- BDownload the binary from the internet during the build process.
- CAsk to have the binary added to the Cloud Build environment by filing a feature request against the Cloud Build public Issue Tracker.
- DInclude the binary in your Cloud Source Repositories repository and reference it in your build scripts.
34You are developing an application that consists of several microservices running in a Google Kubernetes Engine cluster. One microservice needs to connect to a third-party database running on-premises. You need to store credentials to the database and ensure that these credentials can be rotated while following security best practices. What should you do?
- AStore the credentials in a sidecar container proxy, and use it to connect to the third-party database.
- BConfigure a service mesh to allow or restrict traffic from the Pods in your microservice to the database.
- CStore the credentials in an encrypted volume mount, and associate a Persistent Volume Claim with the client Pod.
- DStore the credentials as a Kubernetes Secret, and use the Cloud Key Management Service plugin to handle encryption and decryption.
35Option D
- AOption A
- BOption C
- COption B
36Your data is stored in Cloud Storage buckets. Fellow developers have reported that data downloaded from Cloud Storage is resulting in slow API performance. You want to research the issue to provide details to the GCP support team. Which command should you run?
- Agsutil perfdiag -o output.json gs://my-bucket
- Bgcloud compute scp example-instance:~/test-data -o output.json gs://my-bucket
- Cgcloud services test -o output.json gs://my-bucket
- Dgsutil test -o output.json gs://my-bucket
37You are monitoring a web application that is written in Go and deployed in Google Kubemetes Engine. You notice an increase in CPU and memory utilization. You need to determine which function is consuming the most CPU and memory resources. What should you do?
- AImport OpenTelemetry and Trace export packages into your application, and create the trace provider.
Review the latency data for your
application on the Trace overview page, and identify which functions cause the most latercy. - BImport the Cloud Profiler package into your application, and initialize the Profiler agent. Review the generated flame graph in the Google Cloud console to identify time-intensive functions.
- CAdd print commands to the application source code to log when each function is called, and redeploy the application.
- DCreate a Cloud Logging query that gathers the web application's logs. Write a Python script that calculates the difference between the timestamps from the beginning and the end of the application's longest functions to identity time-intensive functions.
- AImport OpenTelemetry and Trace export packages into your application, and create the trace provider.
38You are running a containerized application on Google Kubernetes Engine. Your container images are stored in Container Registry. Your team uses CI/CD practices. You need to prevent the deployment of containers with known critical vulnerabilities. What should you do?
- A* Enable the Container Scanning API to perform vulnerability scanning
* Programmatically review vulnerability reporting through the Container Scanning API, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed - B* Use Web Security Scanner to automatically crawl your application
* Review the scan results in the scan details page in the Cloud Console, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed - C* Enable the Container Scanning API to perform vulnerability scanning
* Review vulnerability reporting in Container Registry in the Cloud Console, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed - D* Use Web Security Scanner to automatically crawl your application
* Review your application logs for scan results, and provide an attestation that the container is free of known critical vulnerabilities
* Use Binary Authorization to implement a policy that forces the attestation to be provided before the container is deployed
- A* Enable the Container Scanning API to perform vulnerability scanning
39You are a developer at a large organization. You are deploying a web application to Google Kubernetes Engine (GKE). The DevOps team has built a CI/CD pipeline that uses Cloud Deploy to deploy the application to Dev Test, and Prod clusters in GKE. After Cloud Deploy successfully deploys the application to the Dev cluster you want to automatically promote it to the Test Cluster. How should you configure this process following Google-recommended best practices?
- A1 Create a Cloud Function that calls the Google Cloud Deploy API to promote the application to the Test cluster
2 Configure this function to be triggered by SUCCEEDED Pub/Sub messages from the cloud-builds topic - B1 Create a Cloud Build pipeline that uses the gke-deploy builder
2 Create a Cloud Build trigger that listens to SUCCEEDED Pub/Sub messages from the cloud-builds topic
3 Configure this pipeline to run a deployment step to the Test cluster - C1 Create a Cloud Build trigger that listens for SUCCEEDED Pub/Sub messages from the clouddeploy-operations topic.
2 Configure Cloud Build to include a step that promotes the application to the Test cluster - D1 Create a Cloud Function that calls the Google Cloud Deploy API to promote the application to the Test cluster
2 Configure this function to be triggered by SUCCEEDED Pub/Sub messages from the clouddeploy operations topic
- A1 Create a Cloud Function that calls the Google Cloud Deploy API to promote the application to the Test cluster
Information
- Description
- Quiz on Untitled, created by Alexandru Bancila on 02/05/2025.
- Author
- Alexandru Bancila
- Language
- English
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz