Question 1

You are developing a financial trading application that will be used globally. Data is stored and queried using a relational structure, and clients from all over the world should get the exact identical state of the data. The application will be deployed in multiple regions to provide the lowest latency to end users. You need to select a storage option for the application data while minimizing latency. What should you do?

Accepted Answer

Cloud Spanner is a globally distributed relational database service that provides strong consistency and low latency across multiple regions, making it ideal for a financial trading application that requires identical data state globally.

Question 2

You have successfully created a development environment in a project for an application. This application uses Compute Engine and Cloud SQL. Now you need to create a production environment for this application. The security team has forbidden the existence of network routes between these 2 environments and has asked you to follow Google-recommended practices. What should you do?

Accepted Answer

The answer of You have successfully created a development environment...

Question 3

Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment). What should you do?

Accepted Answer

The answer of Your web application has been running successfully...

Question 4

You have been asked to set up Object Lifecycle Management for objects stored in storage buckets. The objects are written once and accessed frequently for 30 days. After 30 days, the objects are not read again unless there is a special need. The objects should be kept for three years, and you need to minimize cost. What should you do?

Accepted Answer

Nearline storage is a low-cost storage option that is ideal for objects that are accessed infrequently. Archive storage is the lowest-cost storage option, but it is not suitable for objects that are accessed frequently. Standard storage is the most expensive storage option, so it is not a good choice for objects that are not accessed frequently. Coldline storage is a good option for objects that are accessed infrequently, but it is more expensive than Nearline storage. Therefore, the best option is to set up a policy that uses Nearline storage for 30 days and then moves to Archive storage for three years.

Question 5

Your company has a single sign-on (SSO) identity provider that supports Security Assertion Markup Language (SAML) integration with service providers. Your company has users in Cloud Identity. You would like users to authenticate using your company's SSO provider. What should you do?

Accepted Answer

Cloud Identity supports SAML integration with service providers. In this case, Cloud Identity is the service provider and the company's SSO provider is the identity provider.

Question 6

An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?

Accepted Answer

The answer of An application generates daily reports in a...

Question 7

Your team maintains the infrastructure for your organization. The current infrastructure requires changes. You need to share your proposed changes with the rest of the team. You want to follow Google's recommended best practices. What should you do?

Accepted Answer

Using Deployment Manager templates and storing them in Cloud Source Repositories aligns with best practices for version control and collaboration on infrastructure changes.

Question 8

You are asked to set up application performance monitoring on Google Cloud projects A, B, and C as a single pane of glass. You want to monitor CPU, memory, and disk. What should you do?

Accepted Answer

The answer of You are asked to set up application...

Question 9

You are about to deploy a new Enterprise Resource Planning (ERP) system on Google Cloud. The application holds the full database in-memory for fast data access, and you need to configure the most appropriate resources on Google Cloud for this application. What should you do?

Accepted Answer

Compute Engine instances with local SSDs attached provide fast data access, which is ideal for applications that hold the full database in-memory.

Question 10

You have designed a solution on Google Cloud that uses multiple Google Cloud products. Your company has asked you to estimate the costs of the solution. You need to provide estimates for the monthly total cost. What should you do?

Accepted Answer

The answer of You have designed a solution on Google...

Question 11

You need to create a copy of a custom Compute Engine virtual machine (VM) to facilitate an expected increase in application traffic due to a business acquisition. What should you do?

Accepted Answer

Creating a custom Compute Engine image from a snapshot and then creating instances from that image is the correct approach. This allows you to efficiently replicate the VM configuration and deploy multiple instances to handle increased traffic.

Question 12

You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?

Accepted Answer

The answer of You are monitoring an application and receive...

Question 13

The core business of your company is to rent out construction equipment at large scale. All the equipment that is being rented out has been equipped with multiple sensors that send event information every few seconds. These signals can vary from engine status, distance traveled, fuel level, and more. Customers are billed based on the consumption monitored by these sensors. You expect high throughput - up to thousands of events per hour per device - and need to retrieve consistent data based on the time of the event. Storing and retrieving individual signals should be atomic. What should you do?

Accepted Answer

Cloud Bigtable is designed for high throughput and low latency, making it suitable for handling large volumes of time-series data like sensor events. Using a row key based on the event timestamp allows for efficient retrieval of data in a time-ordered manner.

Question 14

You have an application that uses Cloud Spanner as a backend database. The application has a very predictable traffic pattern. You want to automatically scale up or down the number of Spanner nodes depending on traffic. What should you do?

Accepted Answer

Creating a Cloud Monitoring alerting policy to send an alert to a webhook allows for automated responses. A Cloud Function can be triggered by the webhook to resize Spanner resources based on CPU usage, enabling automatic scaling.

Question 15

Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?

Accepted Answer

The roles/billing viewer role allows users to view billing information without granting additional permissions to modify or manage billing accounts.

Question 16

Your company set up a complex organizational structure on Google Cloud. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members, and you want to follow Google-recommended practices. What should you do?

Accepted Answer

Adding users to a group and then assigning the group the roles/browser role is a Google-recommended practice for managing permissions efficiently. The roles/browser role provides read-only access to view the structure without granting unnecessary permissions.

Question 17

You created several resources in multiple Google Cloud projects. All projects are linked to different billing accounts. To better estimate future charges, you want to have a single visual representation of all costs incurred. You want to include new cost data as soon as possible. What should you do?

Accepted Answer

Exporting billing data to BigQuery allows for comprehensive analysis and visualization in Data Studio, providing a unified view of costs across multiple projects and billing accounts.

Question 18

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC) is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and ensure that no public Internet traffic can be routed to it. What should you do?

Accepted Answer

The answer of Your company has workloads running on Compute...

Question 19

You received a JSON file that contained a private key of a Service Account in order to get access to several resources in a Google Cloud project. You downloaded and installed the Cloud SDK and want to use this private key for authentication and authorization when performing gcloud commands. What should you do?

Accepted Answer

The correct command to authenticate using a service account key file is `gcloud auth activate-service-account`, which allows you to specify the private key file for authentication.

Question 20

You are running a data warehouse on BigQuery. A partner company is offering a recommendation engine based on the data in your data warehouse. The partner company is also running their application on Google Cloud. They manage the resources in their own project, but they need access to the BigQuery dataset in your project. You want to provide the partner company with access to the dataset. What should you do?

Accepted Answer

The partner should create a Service Account in their project, and you should grant that Service Account access to the BigQuery dataset in your project. This allows the partner to manage their own credentials while accessing your dataset securely.

Exam 8: GSuite

Your web application has been running successfully on Cloud Run for Anthos. You want to evaluate an updated version of the application with a specific percentage of your production users (canary deployment) . What should you do?