Question 1

You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?

Accepted Answer

The answer of You are migrating a production-critical on-premises application...

Question 2

You want to find out when users were added to Cloud Spanner Identity Access Management (IAM) roles on your Google Cloud Platform (GCP) project. What should you do in the GCP Console?

Accepted Answer

The IAM & admin console allows you to review IAM policies for Cloud Spanner roles, including when users were added to those roles.

Question 3

You have a Google Cloud Platform account with access to both production and development projects. You need to create an automated process to list all compute instances in development and production projects on a daily basis. What should you do?

Accepted Answer

Using gcloud config to create and switch between configurations allows you to manage different project settings and use gcloud compute instances list to list instances for each project.

Question 4

You are the organization and billing administrator for your company. The engineering team has the Project Creator role on the organization. You do not want the engineering team to be able to link projects to the billing account. Only the finance team should be able to link a project to a billing account, but they should not be able to make any other changes to projects. What should you do?

Accepted Answer

The answer of You are the organization and billing administrator...

Question 5

You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?

Accepted Answer

The answer of You are operating a Google Kubernetes Engine...

Question 6

You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items. How should you configure the auditor's permissions?

Accepted Answer

The built-in IAM project Viewer role provides read-only access to all resources within a project, which is suitable for an auditor who needs to view but not modify project items.

Question 7

You create a Deployment with 2 replicas in a Google Kubernetes Engine cluster that has a single preemptible node pool. After a few minutes, you use kubectl to examine the status of your Pod and observe that one of them is still in Pending status:  What is the most likely cause?

Accepted Answer

The answer of You create a Deployment with 2 replicas...

Question 8

You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You need at least 3 unoccupied instances at all times. Which scaling type should you use?

Accepted Answer

Automatic Scaling with min_idle_instances set to 3 ensures that there are always at least 3 unoccupied instances available to handle incoming requests, allowing the application to scale based on request rate.

Question 9

You recently deployed a new version of an application to App Engine and then discovered a bug in the release. You need to immediately revert to the prior version of the application. What should you do?

Accepted Answer

The answer of You recently deployed a new version of...

Question 10

You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?

Accepted Answer

The answer of You have a website hosted on App...

Question 11

Your company's infrastructure is on-premises, but all machines are running at maximum capacity. You want to burst to Google Cloud. The workloads on Google Cloud must be able to directly communicate to the workloads on-premises using a private IP range. What should you do?

Accepted Answer

The answer of Your company's infrastructure is on-premises, but all...

Question 12

You want to select and configure a solution for storing and archiving data on Google Cloud Platform. You need to support compliance objectives for data from one geographic location. This data is archived after 30 days and needs to be accessed annually. What should you do?

Accepted Answer

The answer of You want to select and configure a...

Question 13

You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project . What should you do?

Accepted Answer

To list enabled APIs for a specific GCP project, you first need the project ID, which can be obtained using `gcloud projects list`. Then, use `gcloud services list --project <project ID>` to list the enabled APIs for that project.

Question 14

You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below:  You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

Accepted Answer

The answer of You've deployed a microservice called myapp1 to...

Question 15

Your development team needs a new Jenkins server for their project. You need to deploy the server using the fewest steps possible. What should you do?

Accepted Answer

Using GCP Marketplace to launch the Jenkins solution is the quickest and simplest method, as it provides a pre-configured Jenkins setup with minimal manual steps required.

Question 16

You significantly changed a complex Deployment Manager template and want to confirm that the dependencies of all defined resources are properly met before committing it to the project. You want the most rapid feedback on your changes. What should you do?

Accepted Answer

The --preview option allows you to simulate the deployment without actually applying changes, providing rapid feedback on resource dependencies.

Question 17

You deployed an LDAP server on Compute Engine that is reachable via TLS through port 636 using UDP. You want to make sure it is reachable by clients over that port. What should you do?

Accepted Answer

To ensure the LDAP server is reachable by clients over UDP port 636, you need to create a firewall rule allowing ingress traffic on that port for the network tag associated with the instance.

Question 18

You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?

Accepted Answer

To test your application locally with Cloud Datastore, you need to install the Cloud Datastore emulator using the `gcloud components install` command.

Question 19

You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?

Accepted Answer

Creating a single custom VPC with 2 subnets in different regions and with different CIDR ranges allows all VMs to communicate over internal IPs without additional routes, as they are part of the same VPC.

Question 20

You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube-system namespace of the cluster. You want a solution that uses the fewest possible services. What should you do?

Accepted Answer

The answer of You are using Deployment Manager to create...

Exam 8: GSuite