Test
GCP Associate Cloud Engineer (Explanations)
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (45)
1You are working on a project named whizlabs-ace, and want to list all the roles assigned to users in the project.
Which of the following gcloud commands would you use?- Agcloud iam list whizlabs-ace
- Bgcloud projects list whizlabs-ace
- Cgcloud projects get-iam-policy whizlabs-ace
- Dgcloud iam get-iam-policy whizlabs-ace
2While working on a project, an application administrator (A) has been given the responsibility of managing all resources. He wants to delegate the responsibility of managing the existing service accounts to another administrator (B). That administrator (B) will also be responsible to manage the other service accounts that will be created. Which of the following is the best way to delegate the privileges required to manage all the service accounts?
- AGranting iam.serviceAccountUser to the administrator at the project level
- BGranting iam.serviceProjectUser to the administrator at the project level
- CGranting iam.serviceAccountUser to the administrator at the account level
- DGranting iam.serviceProjectUser to the administrator at the account level
3You're working for a company as a Cloud engineer. You have a managed instance group for which the autoscaling is enabled if CPU utilization is 70%. Right now there are 4 instances available in this instance group. When you connect to one of the instances, you see that the CPU utilization is 75% and there is no new instance started in the group. What could be the possible reason for not starting another instance here?
- AIt will take 60 seconds to launch a new instance
- BAutoscaling is not active
- CThe average CPU usage of the instance group is less than 70%
- DNone of the above
4You are a Google Cloud Engineer and assigned to set up a project for a team of four members. You need to grant only general permissions for all the resources of the project. You decided to grant a primitive role to each person for different levels of access on the basis of their responsibilities in the project. What is not considered as a primitive role in Google Cloud Platform console?
- AViewer
- BEditor
- COwner
- DPublisher
5A VM instance is trying to read from a Cloud Storage bucket. IAM roles assigned to the VM service account allows the VM instance to read from the bucket. But the scopes assigned to the VM deny the reading bucket. What will happen when VM tries to read from the bucket?
- AThe application performing the read will drop the read operation
- BThe read will not execute as IAM roles and scopes both determine what operation will be performed
- CThe read will succeed because the most permissive permission is allowed
- DThe read operation will execute, but a message will be sent to the Stackdriver Logging
6A cloud engineering has been assigned to work on a running project. He wants to know which VMs are running in the project. How could the cloud engineer get the information of all the VMs running in the project?
- AExecute the command gcloud compute list
- BExecute the command gcloud list instances
- CExecute the command gcloud instances list
- DExecute the command gcloud compute instances list
7A cloud engineer wants to create a VM named whiz-server-1 with four CPUs. Which of the following commands would he use to create the VM whiz-server-1?
- Agcloud compute instances create --machine-type=n1-standard-4 whiz-server-1
- Bgcloud compute instances create --cpus=4 whiz-server-1
- Cgcloud compute instances create --machine-type=n1-standard-4 -instancename whiz-server-1
- Dgcloud compute instances create --machine-type=n1-4-cpu whiz-server-1
8What is the gcloud command to create a cluster named ch09-cluster-10 with four nodes?
- Agcloud container clusters create ch09-cluster-10 4
- Bgcloud container clusters create ch09-cluster-10 --num-nodes=4
- Cgcloud clusters container create ch09-cluster-10 --num-nodes=4
- Dgcloud container beta clusters create ch09-cluster-10 --nodes-num=4
9You have deployed a Django 1.5 Python application to App Engine. This version of Django requires Python 3. Due to some issues, App Engine is trying to run the application using Python2. Which of the following file would you check and modify (if required) to ensure that Python 3 is used with the application?
- Aapp.config
- Bservices.yaml
- Capp.yaml
- Dcron.yaml
10Which of the following commands is used to create buckets in Cloud Storage?
- Agcloud storage buckets create
- Bgsutil storage buckets create
- Cgsutil mb
- Dgcloud mb
11Which of the following IP addresses would you specify to define a CIDR range that will apple to all the destination addresses?
- A0.0.0.0/0
- B172.16.0.0/12
- C192.168.0.0/16
- D10.0.0.0/8
12You have set a firewall rule that will permit inbound connections to a VM instance named whizserver-2. You want to apply this rule only if there is not another rule that would deny that traffic. What priority would you give this rule?
- A1000
- B1
- C65535
- D0
13You have created a subnet named subnetace1 with 16,382 addresses using 192.168.0.0. Later you realized that you won't require too many addresses, and so you want to reduce address to 254. Which of the following command would you use?
- Agcloud compuete networks subnets expand-ip-range subnetace1 --prefix-length=28
- Bgcloud compuete networks subnets expand-ip-range subnetace1 --size=248
- Cgcloud compuete networks subnets expand-ip-range subnetace1 --prefix-length=-12
- DThis is no command in google cloud to reduce the number of available addresses in a subnet
14You have recently joined a startup that is migrating their infrastructure from AWS to Google Cloud. A junior was assigned the task of migrating one of their web servers with Amazon Linux OS from AWS to GCP in a public subnet of custom VPC. He was able to migrate the instance successfully but is unable to get SSH access of migrated instance. What are the possible steps to look for? (Multiple answers)
- ACheck if he has attached correct firewall rule with port UDP:22 open to the instance
- BAsk if he has added SSH key to the instance while launching phase
- CGoogle Cloud does not support Amazon Linux images because of market competition
- DMake sure the firewall is attached to the instance with TCP port 22 open
15You work for a retail company that has a busy online store. As you are approaching New Year, you find that your e-store is getting more and more traffic. You ensure that your web servers are behind a managed instance group. However, you notice that the web tier is frequently scaling, sometimes multiple times in an hour. You need to keep the instance group from scaling up and down so rapidly. Which of the following options would help you achieve this?
- AChange the auto scaling metric to use multiple metrics instead of just one metric
- BReduce the number of maximum instance count
- CAssociate a health check with the instance group
- DIncrease the cool down period
16You have been asked to build backend using Clojure and host it on Google Cloud with full freedom of choosing OS, applications, libraries, etc. Which service would you prefer?
- ACompute Engine
- BApp Engine Standard
- CCloud Function
- DCloudRun
17You have been hired as a contractor by one of the travel technology company who is planning to containerize thier existing application in such a way that they can perform a lift and shift very easily in the future if they plan to move away from Google Cloud. Which service would best suit this case?
- ACloud Function
- BApp Engine Standard
- CKubernetes Engine
- DCloudRun
18Which is the correct command to bind an IAM policy to a service account at an organization level?
- Agcloud organizations add-iam-policy-binding org_id --member serviceAccount:whizlab@whizlabs-prj.iam.gserviceaccount.com --role roles/viewer
- Bgcloud projects add-iam-policy-binding whizlabs-prj --member serviceAccount:whizlabswhizlabs-prj.iam.gserviceaccount.com --role roles/viewer
- Cgcloud iam service-accounts keys create whizlabs-prj --iam-account whizlabs@whizlabs-prj.iam.gserviceaccount.com
- Dgcloud organizations add-iam-policy-binding --member serviceAccount:whizlab@whizlabs-prj.iam.gserviceaccount.com --role roles/viewer
19You are heading the Cloud & DevOps department in a financial company and have been asked to create a custom role for one of your colleagues who needs access to deploy an application to App Engine. Which permission will you use?
- AApp Engine Editor
- BApp Engine Admin
- CApp Engine Deployer
- DApp Engine Viewer
20You are about to start working on a micro-service deployment project using Google Kubernetes Engine service. The client needs everything on Google and wants you to maintain both frontend and backend code on Google Cloud as well. Which service best suits this case?
- ACloud Storage
- BCloud Source Repository
- CGoogle Container Registry
- DGitHub
21You are working as a System Administrator and have been asked to make sure that all images are patched up to date and developers are not allowed to use old images that are not up to date as per PCI compliance. How would you achieve this?
- ADrop a mail to all the developers regarding which image to use whenever you patch images
- BMark image as deprecated to prevent users from using the old image
- CMark image as obsolete to prevent users from using the old image
- DNone of the above
22You are building an architecture for one of your clients with a requirement of streaming millions of requests with high availability and durability along with HIPAA compliance. Which managed service would you prefer?
- ACloud Function
- BCloud DataProc
- CCloud Pub/Sub
- DRabbitMQ
23You are planning to build a micro-service application with docker containers and want to host them on Google Cloud as stateless and serverless. Which service will help you serve the need?
- ACloud Function
- BApp Engine Standard
- CApp Engine Flexible
- DCloudRun
24You have been asked to deploy a highly available Kubernetes cluster using Google Kubernetes Engine by your manager. While spinning up the cluster you realize you do not see the option of creating a master. What can be the reason?
- AGKE does not use master node to control child nodes
- BYou need to spin up a compute instance and set it up as a master node
- CMaster node is created automatically by GKE
- DNone of the above
25You have been asked to automate the infrastructure deployment using Google Deployment Manager service. Which formats do Deployment manager templates support?
- AJSON
- BYAML
- CPowershell
- DPython
26You are a project owner and need your co-worker to deploy a new version of your application to App Engine. You want to follow Google’s recommended practices. Which IAM roles should you grant your co-worker?
- AA. Project Editor
- BB. App Engine Service Admin
- CC. App Engine Deployer
- DD. App Engine Code Viewer
27Your company has reserved a monthly budget for your project. You want to be informed automatically of your project spend so that you can take action when you approach the limit. What should you do?
- AA. Link a credit card with a monthly limit equal to your budget.
- BB. Create a budget alert for 50%, 90%, and 100% of your total monthly budget.
- CC. In App Engine Settings, set a daily budget at the rate of 1/30 of your monthly budget.
- DD. In the GCP Console, configure billing export to BigQuery. Create a saved view that queries your total spend.
28You have a project using BigQuery. You want to list all BigQuery jobs for that project. You want to set this project as the default for the bq command-line tool. What should you do?
- AA. Use "gcloud config set project" to set the default project.
- BB. Use "bq config set project" to set the default project.
- CC. Use "gcloud generate config-url" to generate a URL to the Google Cloud Platform Console to set the default project.
- DD. Use "bq generate config-url" to generate a URL to the Google Cloud Platform Console to set the default project.
29Your project has all its Compute Engine resources in the europe-west1 region. You want to set europe-west1 as the default region for gcloud commands. What should you do?
- AA. Use Cloud Shell instead of the command line interface of your device. Launch Cloud Shell after you navigate to a resource in the europe-west1 region. The europe-west1 region will automatically become the default region.
- BB. Use "gcloud config set compute/region europe-west1" to set the default region for future gcloud commands.
- CC. Use "gcloud config set compute/zone europe-west1" to set the default region for future gcloud commands.
- DD. Create a VPN from on-premises to a subnet in europe-west1, and use that connection when executing gcloud commands.
30
You developed a new application for App Engine and are ready to deploy it to production. You need to estimate the costs of running your application on Google Cloud Platform as accurately as possible. What should you do?- AA. Create a YAML file with the expected usage. Pass this file to the "gcloud app estimate" command to get an accurate estimation.
- BB. Multiply the costs of your application when it was in development by the number of expected users to get an accurate estimation.
- CC. Use the pricing calculator for App Engine to get an accurate estimation of the expected charges.
- DD. Create a ticket with Google Cloud Billing Support to get an accurate estimation.
31Your company processes high volumes of IoT data that are time-stamped. The total data volume can be several petabytes. The data needs to be written and changed at a high speed. You want to use the most performant storage option for your data. Which product should you use?
- AA. Cloud Datastore
- BB. Cloud Storage
- CC. Cloud Bigtable
- DD. BigQuery
32Your application has a large international audience and runs stateless virtual machines within a managed instance group across multiple locations. One feature of the application lets users upload files and share them with other users. Files must be available for 30 days; after that, they are removed from the system entirely. Which storage solution should you choose?
- AA. A Cloud Datastore database.
- BB. A multi-regional Cloud Storage bucket.
- CC. Persistent SSD on virtual machine instances.
- DD. A managed instance group of Filestore servers.
33You have a definition for an instance template that contains a web application. You are asked to deploy the application so that it can scale based on the HTTP traffic it receives. What should you do?
- AA. Create a VM from the instance template. Create a custom image from the VM’s disk. Export the image to Cloud Storage. Create an HTTP load balancer and add the Cloud Storage bucket as its backend service.
- BB. Create a VM from the instance template. Create an App Engine application in Automatic Scaling mode that forwards all traffic to the VM.
- CC. Create a managed instance group based on the instance template. Configure autoscaling based on HTTP traffic and configure the instance group as the backend service of an HTTP load balancer.
- DD. Create the necessary amount of instances required for peak user traffic based on the instance template. Create an unmanaged instance group and add the instances to that instance group. Configure the instance group as the Backend Service of an HTTP load balancer.
34You are creating a Kubernetes Engine cluster to deploy multiple pods inside the cluster. All container logs must be stored in BigQuery for later analysis. You want to follow Google-recommended practices. Which two approaches can you take?
- AA. Turn on Stackdriver Logging during the Kubernetes Engine cluster creation.
- BB. Turn on Stackdriver Monitoring during the Kubernetes Engine cluster creation.
- CC. Develop a custom add-on that uses Cloud Logging API and BigQuery API. Deploy the add-on to your Kubernetes Engine cluster.
- DD. Use the Stackdriver Logging export feature to create a sink to Cloud Storage. Create a Cloud Dataflow job that imports log files from Cloud Storage to BigQuery.
- EE. Use the Stackdriver Logging export feature to create a sink to BigQuery. Specify a filter expression to export log records related to your Kubernetes Engine cluster only.
35You need to create a new Kubernetes Cluster on Google Cloud Platform that can autoscale the number of worker nodes. What should you do?
- AA. Create a cluster on Kubernetes Engine and enable autoscaling on Kubernetes Engine.
- BB. Create a cluster on Kubernetes Engine and enable autoscaling on the instance group of the cluster.
- CC. Configure a Compute Engine instance as a worker and add it to an unmanaged instance group. Add a load balancer to the instance group and rely on the load balancer to create additional Compute Engine instances when needed.
- DD. Create Compute Engine instances for the workers and the master, and install Kubernetes. Rely on Kubernetes to create additional Compute Engine instances when needed.
36You have an application server running on Compute Engine in the europe-west1-d zone. You need to ensure high availability and replicate the server to the europe-west2-c zone using the fewest steps possible. What should you do?
- AA. Create a snapshot from the disk. Create a disk from the snapshot in the europe-west2-c zone. Create a new VM with that disk.
- BB. Create a snapshot from the disk. Create a disk from the snapshot in the europe-west1-d zone and then move the disk to europe-west2-c. Create a new VM with that disk.
- CC. Use "gcloud" to copy the disk to the europe-west2-c zone. Create a new VM with that disk.
- DD. Use "gcloud compute instances move" with parameter "--destination-zone europe-west2-c" to move the instance to the new zone.
37Your company has a mission-critical application that serves users globally. You need to select a transactional, relational data storage system for this application. Which two products should you choose?
- AA. BigQuery
- BB. Cloud SQL
- CC. Cloud Spanner
- DD. Cloud Bigtable
- EE. Cloud Datastore
38You have a Kubernetes cluster with 1 node-pool. The cluster receives a lot of traffic and needs to grow. You decide to add a node. What should you do?
- AA. Use "gcloud container clusters resize" with the desired number of nodes.
- BB. Use "kubectl container clusters resize" with the desired number of nodes.
- CC. Edit the managed instance group of the cluster and increase the number of VMs by 1.
- DD. Edit the managed instance group of the cluster and enable autoscaling.
39You created an update for your application on App Engine. You want to deploy the update without impacting your users. You want to be able to roll back as quickly as possible if it fails. What should you do?
- AA. Delete the current version of your application. Deploy the update using the same version identifier as the deleted version.
- BB. Notify your users of an upcoming maintenance window. Deploy the update in that maintenance window.
- CC. Deploy the update as the same version that is currently running.
- DD. Deploy the update as a new version. Migrate traffic from the current version to the new version.
40You have created a Kubernetes deployment, called Deployment-A, with 3 replicas on your cluster. Another deployment, called Deployment-B, needs access to Deployment-A. You cannot expose Deployment-A outside of the cluster. What should you do?
- AA. Create a Service of type NodePort for Deployment A and an Ingress Resource for that Service. Have Deployment B use the Ingress IP address.
- BB. Create a Service of type LoadBalancer for Deployment A. Have Deployment B use the Service IP address.
- CC. Create a Service of type LoadBalancer for Deployment A and an Ingress Resource for that Service. Have Deployment B use the Ingress IP address.
- DD. Create a Service of type ClusterIP for Deployment A. Have Deployment B use the Service IP address.
41You need to estimate the annual cost of running a Bigquery query that is scheduled to run nightly. What should you do?
- AA. Use "gcloud query --dry_run" to determine the number of bytes read by the query. Use this number in the Pricing Calculator.
- BB. Use "bq query --dry_run" to determine the number of bytes read by the query. Use this number in the Pricing Calculator.
- CC. Use "gcloud estimate" to determine the amount billed for a single query. Multiply this amount by 365.
- DD. Use "bq estimate" to determine the amount billed for a single query. Multiply this amount by 365.
42
You want to find out who in your organization has Owner access to a project called "my-project".What should you do?- AA. In the Google Cloud Platform Console, go to the IAM page for your organization and apply the filter "Role:Owner".
- BB. In the Google Cloud Platform Console, go to the IAM page for your project and apply the filter "Role:Owner".
- CC. Use "gcloud iam list-grantable-role --project my-project" from your Terminal.
- DD. Use "gcloud iam list-grantable-role" from Cloud Shell on the project page.
43
You want to create a new role for your colleagues that will apply to all current and future projects created in your organization. The role should have the permissions of the BigQuery Job User and Cloud Bigtable User roles. You want to follow Google’s recommended practices. How should you create the new role?- AA. Use "gcloud iam combine-roles --global" to combine the 2 roles into a new custom role.
- BB. For one of your projects, in the Google Cloud Platform Console under Roles, select both roles and combine them into a new custom role. Use "gcloud iam promote-role" to promote the role from a project role to an organization role.
- CC. For all projects, in the Google Cloud Platform Console under Roles, select both roles and combine them into a new custom role.
- DD. For your organization, in the Google Cloud Platform Console under Roles, select both roles and combine them into a new custom role.
44You work in a small company where everyone should be able to view all resources of a specific project. You want to grant them access following Google’s recommended practices. What should you do?
- AA. Create a script that uses "gcloud projects add-iam-policy-binding" for all users’ email addresses and the Project Viewer role.
- BB. A. Create a script that uses "gcloud iam roles create" for all users’ email addresses and the Project Viewer role.
- CC. Create a new Google Group and add all users to the group. Use "gcloud projects add-iam-policy-binding" with the Project Viewer role and Group email address.
- DD. Create a new Google Group and add all members to the group. Use "gcloud iam roles create" with the Project Viewer role and Group email address.
45You need to verify the assigned permissions in a custom IAM role. What should you do?
- AA. Use the GCP Console, IAM section to view the information.
- BB. Use the "gcloud init" command to view the information.
- CC. Use the GCP Console, Security section to view the information.
- DD. Use the GCP Console, API section to view the information.
Información
- Descripción
- Foundation Cloud Test sobre GCP Associate Cloud Engineer (Explanations), creado por Marc Hall el 19/04/2021.
- Autor
- Marc Hall
- Idioma
- English
- Visitas
- 12
- Historial
- Creado el 19 abr 2021 · actualizado el 25 abr 2021
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test