Quiz
GCP Associate Cloud Engineer 1.1
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (62)
1Which of the following services provides real-time messaging?
- ACloud Pub/Sub
- BBig Query
- CApp Engine
- DDatastore
2Which of the following tasks would Nearline Storage be well suited for?
- AA mounted Linux file system
- BImage assets for a high traffic website
- CFrequently read files
- DInfrequently read data backups
3Which of the following products will allow you to administer your projects through a browser based command-line?
- ACloud Datastore
- BCloud Command-line
- CCloud Terminal
- DCloud Shell
4Cloud SQL is based on which database engine?
- AMicrosoft SQL Server
- BMySQL
- COracle
- DInformix
5Which of the following products will allow you to perform live debugging without stopping your application?
- AApp Engine Active Debugger (AEAD)
- BStackdriver Debugger
- CCode Inspector
- DPause IT
6Which of these options is not a valid Cloud Storage class?
- AGlacier Storage
- BNearline Storage
- CColdline Storage
- DRegional Storage
7Regarding Cloud Storage, which option allows any user access to a Cloud Storage resource for a limited time, using a specific URL?
- AOpen Buckets
- BTemporary Resources
- CSigned URLs
- DTemporary URLs
8Of the options given, which is a NoSQL database?
- ACloud Datastore
- BCloud SQL
- CAll of the given options
- DCloud Storage
9Container Engine allows orchestration of what type of containers?
- ABlue Whale
- BLXC
- CBSD Jails
- DDocker
10Regarding Cloud IAM, what type of role(s) are available?
- ABasic roles and Compiled roles
- BPrimitive roles and Predefined roles
- CSimple roles
- DBasic roles and Curated roles
11Which of the following products will allow you to host a static website?
- ACloud SDK
- BCloud Endpoints
- CCloud Storage
- DCloud Datastore
12Container Engine is built on which open-source system?
- ASwarm
- BKubernetes
- CDocker Orchastrate
- DMesos
13Cloud Source Repositories provide a hosted version of which version control system?
- AGit
- BRCS
- CSVN
- DMercurial
14Which of the following is an analytics data warehouse?
- ACloud SQL
- BBig Query
- CDatastore
- DCloud Storage
15Which service offers the ability to create and run virtual machines?
- AGoogle Virtualization Engine
- BCompute Containers
- CVM Engine
- DCompute Engine
16Which of the following is not helpful for mitigating the impact of an unexpected failure or reboot?
- AUse persistent disks
- BConfigure tags and labels
- CUse startup scripts to re-configure the system as needed
- DBack up your data
17Which tool allows you to sync data in your Google domain with Active Directory?
- AGoogle Cloud Directory Sync (GCDS)
- BGoogle Active Directory (GAD)
- CGoogle Domain Sync Service
- DGoogle LDAP Sync
18Regarding Cloud Storage: which of the following allows for time-limited access to buckets and objects without a Google account?
- ASigned URLs
- Bgsutil
- CSingle sign-on
- DTemporary Storage Accounts
19Which of the following is a virtual machine instance that can be terminated by Compute Engine without warning?
- AA preemptible VM
- BA shared-core VM
- CA high-cpu VM
- DA standard VM
20Regarding Compute Engine: What is a managed instance group?
- AA managed instance group combines existing instances of different configurations into one manageable group
- BA managed instance group uses an instance template to create identical instances
- CA managed instance group creates a firewall around instances
- DA managed instance group is a set of servers used exclusively for batch processing
21What type of firewall rule(s) does Google Cloud’s networking support?
- Adeny
- Ballow, deny & filtered
- Callow
- Dallow & deny
22How are subnetworks different than legacy networks?
- AThey’re the same, only the branding is different
- BEach subnetwork controls the IP address range used for instances that are allocated to that subnetwork
- CWith subnetworks, IP address allocation occurs at the global network level
- DLegacy networks are the preferred way to create networks
23Which of the following is not a valid metric for triggering autoscaling?
- AGoogle Cloud Pub/Sub queuing
- BAverage CPU utilization
- CStackdriver Monitoring metrics
- DApp Engine Task Queues
24Which of the following features makes applying firewall settings easier?
- AService accounts
- BTags
- CMetadata
- DLabels
25What option does Cloud SQL offer to help with high availability?
- APoint-in-time recovery
- BThe AlwaysOn setting
- CSnapshots
- DFailover replicas
26Regarding Compute Engine: when executing a startup script on a Linux server which user does the instance execute the script as?
- Aubuntu
- BThe Google provided “gceinstance” user
- CWhatever user you specify in the console
- Droot
27Which of the following methods will not cause a shutdown script to be executed?
- AWhen an instance shuts down through a request to the guest operating system
- BA preemptible instance being terminated
- CAn instances.reset API call
- DShutting down via the cloud console
28Which type of account would you use in code when you want to interact with Google Cloud services?
- AGoogle group
- BService account
- CCode account
- DGoogle account
29Which of the following is not an IAM best practice?
- AUse primitive roles by default
- BTreat each component of your application as a separate trust boundary
- CGrant roles at the smallest scope needed
- DRestrict who has access to create and manage service accounts in your project
30Which of the following would not reduce your recovery time in the event of a disaster?
- AMake it as easy as possible to adjust the DNS record to cut over to your warm standby server.
- BReplace your warm standby server with a hot standby server.
- CUse a highly preconfigured machine image for deploying new instances.
- DReplace your active/active hybrid production environment (on-premises and GCP) with a warm standby server.
31Which of the following is not a best practice for mitigating Denial of Service attacks on your Google Cloud infrastructure?
- ABlock SYN floods using Cloud Router
- BIsolate your internal traffic from the external world
- CScale to absorb the attack
- DReduce the attack surface for your GCE deployment
32Which is the fastest instance storage option that will still be available when an instance is stopped?
- ALocal SSD
- BStandard Persistent Disk
- CSSD Persistent Disk
- DRAM disk
33Which of these statements about Microsoft licenses is true?
- AYou can migrate your existing Microsoft application licenses to Compute Engine instances, but not your Microsoft Windows licenses.
- BYou can migrate your existing Microsoft Windows and Microsoft application licenses to Compute Engine instances.
- CYou cannot migrate your existing Microsoft Windows or Microsoft application licenses to Compute Engine instances.
- DYou can migrate your existing Microsoft Windows licenses to Compute Engine instances, but not your Microsoft application licenses.
34Which database services support standard SQL queries?
- ACloud Bigtable and Cloud SQL
- BCloud Spanner and Cloud SQL
- CCloud SQL and Cloud Datastore
- DCloud SQL
35Which statement about IP addresses is false?
- AYou are charged for a static external IP address for every hour it is in use.
- BYou are not charged for ephemeral IP addresses.
- CGoogle Cloud Engine supports only IPv4 addresses, not IPv6.
- DYou are charged for a static external IP address when it is assigned but unused.
36Which Google Cloud Platform service requires the least management because it takes care of the underlying infrastructure for you?
- AContainer Engine
- BCloud Engine
- CApp Engine
- DDocker containers running on Cloud Engine
37To ensure that your application will handle the load even if an entire zone fails, what should you do?
- ADon’t select the “Multizone” option when creating your managed instance group.
- BSpread your managed instance group over two zones and overprovision by 100%.
- CCreate a regional unmanaged instance group and spread your instances across multiple zones.
- DOverprovision your regional managed instance group by at least 50%.
38If you do not grant a user named Bob permission to access a Cloud Storage bucket, but then use an ACL to grant access to an object inside that bucket to Bob, what will happen?
- ABob will be able to access all of the objects inside the bucket because he was granted access to at least one object in the bucket.
- BBob will be able to access the object because bucket and object ACLs are independent of each other.
- CBob will not be able to access the object because he does not have access to the bucket.
- DIt is not possible to grant access to an object when it is inside a bucket for which a user does not have access.
39To set up a virtual private network between your office network and Google Cloud Platform and have the routes automatically updated when the network topology changes, what is the minimal number of each type of component you need to implement?
- A2 Cloud VPN Gateways and 1 Peer Gateway
- B1 Cloud VPN Gateway, 1 Peer Gateway, and 1 Cloud Router
- C2 Peer Gateways and 1 Cloud Router
- D2 Cloud VPN Gateways and 1 Cloud Router
40Which of the following statements about encryption on GCP is not true?
- AGoogle Cloud Platform encrypts customer data stored at rest by default.
- BEach encryption key is itself encrypted with a set of master keys.
- CIf you want to manage your own encryption keys for data on Google Cloud Storage, the only option is Customer-Managed Encryption Keys (CMEK) using Cloud KMS.
- DData in Google Cloud Platform is broken into subfile chunks for storage, and each chunk is encrypted at the storage level with an individual encryption key.
41Which database service requires that you configure a failover replica to make it highly available?
- ACloud Spanner
- BCloud SQL
- CBigQuery
- DCloud Datastore
42Which of these is not a principle you should apply when setting roles and permissions?
- AWhenever possible, assign roles to groups instead of to individuals.
- BGrant users the appropriate permissions to facilitate least privilege
- CWhenever possible, assign primitive roles rather than predefined roles.
- DAudit all policy changes by checking the Cloud Audit Logs.
43Which of these is not a recommended method of authenticating an application with a Google Cloud service?
- AUse the gcloud and/or gsutil commands.
- BRequest an OAuth2 access token and use it directly.
- CEmbed the service account’s credentials in the application’s source code.
- DUse one of the Google Cloud Client Libraries.
44What are two different features that fully isolate groups of VM instances?
- AFirewall rules and subnetworks
- BNetworks and subnetworks
- CSubnetworks and projects
- DProjects and networks
45Suppose you have a web server that is working properly, but you can’t connect to its instance VM over SSH. Which of these troubleshooting methods can you use without disrupting production traffic? (Select 3 answers.)
- ACreate a snapshot of the disk and use it to create a new disk; then attach the new disk to a new instance
- BUse netcat to try to connect to port 22
- CAccess the serial console output
- DCreate a startup script to collect information.
46To configure Stackdriver to monitor a web server and let you know if it goes down, what steps do you need to take? (Select 2 answers.)
- AInstall the Stackdriver Logging Agent on the web server
- BCreate an alerting policy
- CInstall the Stackdriver Monitoring Agent on the web server
- DCreate an uptime check
47Which of these tools can you use to copy data from AWS S3 to Cloud Storage? (Select 2 answers.)
- ACloud Storage Transfer Service
- BS3 Storage Transfer Service
- CCloud Storage Console
- Dgsutil
48What are two of the actions you can take to troubleshoot a virtual machine instance that won’t start up at all? (Select 2 answers.)
- AIncrease the CPU and memory on the instance by changing the machine type.
- BValidate that your disk has a valid file system.
- CExamine your virtual machine instance’s serial port output.
- DConnect to your virtual machine instance using SSH.
49Which statements about application load testing are true? (Select 2 answers.)
- AYou should test at the maximum load that you expect to encounter.
- BYou should test at 50% more than the maximum load that you expect to encounter.
- CIt is not necessary to test sudden increases in traffic since GCP scales seamlessly.
- DYour load tests should include testing sudden increases in traffic.
50Which of these statements about resilience testing are true? (Select 2 answers.)
- AIn a resilience test, your application should keep running with little or no downtime.
- BTo test the resilience of an autoscaling instance group, you can terminate a random instance within that group.
- CIn order for an application to survive instance failures, it should not be stateless.
- DResilience testing is the same as disaster recovery testing.
51Which combination of Stackdriver services will alert you about errors generated by your applications and help you locate the root cause in the code?
- AMonitoring, Trace, and Debugger
- BMonitoring and Error Reporting
- CDebugger and Error Reporting
- DAlerts and Debugger
52If you have configured Stackdriver Logging to export logs to BigQuery, but logs entries are not getting exported to BigQuery, what is the most likely cause?
- AThe Cloud Data Transfer Service has not been enabled.
- BThere isn’t a firewall rule allowing traffic between Stackdriver and BigQuery.
- CStackdriver Logging does not have permission to write to the BigQuery dataset.
- DThe size of the Stackdriver log entries being exported exceeds the maximum capacity of the BigQuery dataset.
53You can use Stackdriver to monitor virtual machines on which cloud platforms?
- AGoogle Cloud Platform, Microsoft Azure
- BGoogle Cloud Platform
- CGoogle Cloud Platform, Microsoft Azure, Amazon Web Services
- DGoogle Cloud Platform, Amazon Web Services
54To minimize the risk of someone changing your log files to hide their activities, which of the following principles would help? (Select 3 answers.)
- ARestrict usage of the owner role for projects and log buckets.
- BRequire two people to inspect the logs.
- CImplement object versioning on the log-buckets.
- DEncrypt the logs using Cloud KMS.
55If network traffic between one Google Compute Engine instance and another instance is being dropped, what is the most likely cause?
- AThe instances are on a network with low bandwidth.
- BThe TCP keep-alive setting is too short.
- CThe instances are on a default network with no additional firewall rules.
- DA firewall rule was deleted.
56Which of the following practices can help you develop more secure software? (Select 3 answers.)
- APenetration tests
- BIntegrating static code analysis tools into your CI/CD pipeline
- CEncrypting your source code
- DPeer review of code
57Which two places hold information you can use to monitor the effects of a Cloud Storage lifecycle policy on specific objects? (Select 2 answers.)
- ACloud Storage Lifecycle Monitoring
- BExpiration time metadata
- CAccess logs
- DLifecycle config file
58If you have object versioning enabled on a multi-regional bucket, what will the following lifecycle config file do?
- AArchive objects older than 30 days (the second rule doesn’t do anything)
- BDelete objects older than 30 days (the second rule doesn’t do anything)
- CArchive objects older than 30 days and move objects to Coldline Storage after 365 days
- DDelete objects older than 30 days and move objects to Coldline Storage after 365 days
59You have been asked to select the storage system for the click-data of your company’s large portfolio of websites. This data is streamed in from a custom website analytics package at a typical rate of 6,000 clicks per minute. With bursts of up to 8,500 clicks per second. It must have been stored for future analysis by your data science and user experience teams.
Which storage infrastructure should you choose?- AGoogle Cloud SQL
- BGoogle Cloud Bigtable
- CGoogle Cloud Storage
- DGoogle Cloud Datastore
60You want to optimize the performance of an accurate, real-time, weather-charting application. The data comes from 50,000 sensors sending 10 readings a second, in the format of a timestamp and sensor reading.
Where should you store the data?- AGoogle BigQuery
- BGoogle Cloud SQL
- CGoogle Cloud Bigtable
- DGoogle Cloud Storage
61You have been asked to select the storage system for the click-data of your company’s large portfolio of websites. This data is streamed in from a custom website analytics package at a typical rate of 6,000 clicks per minute. With bursts of up to 8,500 clicks per second. It must have been stored for future analysis by your data science and user experience teams.
Which storage infrastructure should you choose?- AGoogle Cloud SQL
- BGoogle Cloud Bigtable
- CGoogle Cloud Storage
- DGoogle Cloud Datastore
62You want to optimize the performance of an accurate, real-time, weather-charting application. The data comes from 50,000 sensors sending 10 readings a second, in the format of a timestamp and sensor reading.
Where should you store the data?- AGoogle BigQuery
- BGoogle Cloud SQL
- CGoogle Cloud Bigtable
- DGoogle Cloud Storage
Information
- Description
- Foundation Cloud Quiz on GCP Associate Cloud Engineer 1.1, created by Marc Hall on 25/04/2021.
- Author
- Marc Hall
- Language
- English
- Views
- 21
- Tags
- Rating
- No ratings yet Rate this quiz