Associate Cloud Engineer Free Practice Questions — Page 9
Question 82
You want to enable your development team to deploy new features to an existing Cloud Run service in production. To minimize the risk associated with a new revision, you want to reduce the number of customers who might be affected by an outage without introducing any development or operational costs to your customers. You want to follow Google-recommended practices for managing revisions to a service. What should you do?
A. Ask your customers to retry access to your service with exponential backoff to mitigate any potential problems after the new revision is deployed.
B. Gradually roll out the new revision and split customer traffic between the revisions to allow rollback in case a problem occurs.
C. Send all customer traffic to the new revision, and roll back to a previous revision if you witness any problems in production.
D. Deploy your application to a second Cloud Run service, and ask your customers to use the second Cloud Run service.
Show Answer
Correct Answer: B
Explanation: Cloud Run supports traffic splitting across revisions, allowing gradual rollouts (canary deployments) to limit the impact of regressions and enabling quick rollback if issues are detected. This is the recommended approach for minimizing customer impact without requiring any changes from customers. Options A and D impose customer-side changes, and C exposes all users to the new revision immediately.
Question 83
You need to deploy an application in Google Cloud using serverless technology. You want to test a new version of the application with a small percentage of production traffic. What should you do?
A. Deploy the application to Cloud Run. Use gradual rollouts for traffic splitting.
B. Deploy the application to Google Kubernetes Engine. Use Anthos Service Mash for traffic splitting.
C. Deploy the application to Cloud Functions. Specify the version number in the functions name.
D. Deploy the application to App Engine. For each new version, create a new service.
Show Answer
Correct Answer: A
Explanation: Cloud Run is a serverless compute platform that supports deploying new revisions and gradually shifting a percentage of production traffic to a new revision using traffic splitting. GKE is not the intended serverless choice here, Cloud Functions does not use function names for version-based traffic splitting, and App Engine uses new versions within a service rather than creating a new service for each version.
Question 84
Your company's security vulnerability management policy wants a member of the security team to have visibility into vulnerabilities and other OS metadata for a specific Compute Engine instance. This Compute Engine instance hosts a critical application in your Google Cloud project. You need to implement your company's security vulnerability management policy. What should you do?
A. • Ensure that the Ops Agent is installed on the Compute Engine instance. • Create a custom metric in the Cloud Monitoring dashboard. • Provide the security team member with access to this dashboard.
B. • Ensure that the Ops Agent is installed on the Compute Engine instance. • Provide the security team member roles/osconfig.inventoryViewer permission.
C. • Ensure that the OS Config agent is installed on the Compute Engine instance. • Provide the security team member roles/osconfig.vulnerabilityReportViewer permission.
D. • Ensure that the OS Config agent is installed on the Compute Engine instance. • Create a log sink to BigQuery dataset. • Provide the security team member with access to this dataset.
Show Answer
Correct Answer: C
Explanation: OS vulnerability reporting and OS inventory metadata for Compute Engine are provided by the OS Config agent, not the Ops Agent. To give a security team member visibility into vulnerabilities, the appropriate IAM role is roles/osconfig.vulnerabilityReportViewer. The other options either rely on the Ops Agent (which does not provide vulnerability reports) or use logging/BigQuery rather than the built-in OS Config vulnerability reporting capability.
Question 85
You need to migrate invoice documents stored on-premises to Cloud Storage. The documents have the following storage requirements:
• Documents must be kept for five years.
• Up to five revisions of the same invoice document must be stored, to allow for corrections.
• Documents older than 365 days should be moved to lower cost storage tiers.
You want to follow Google-recommended practices to minimize your operational and development costs. What should you do?
A. Enable retention policies on the bucket, and use Cloud Scheduler to invoke a Cloud Function to move or delete your documents based on their metadata.
B. Enable retention policies on the bucket, use lifecycle rules to change the storage classes of the objects, set the number of versions, and delete old files.
C. Enable object versioning on the bucket, and use Cloud Scheduler to invoke a Cloud Functions instance to move or delete your documents based on their metadata.
D. Enable object versioning on the bucket, use lifecycle conditions to change the storage class of the objects, set the number of versions, and delete old files.
Show Answer
Correct Answer: D
Explanation: Object versioning is required to retain multiple revisions of the same object. Cloud Storage lifecycle rules/conditions are the recommended managed mechanism to automatically transition objects older than 365 days to cheaper storage classes and to delete old object versions/files over time, avoiding custom scheduler/functions. Although a retention policy would enforce immutability, among the provided options only D satisfies the revision requirement together with automated lifecycle management using native Cloud Storage features.
Question 86
Your company developed an application to deploy on Google Kubernetes Engine. Certain parts of the application are not fault-tolerant and are allowed to have downtime. Other parts of the application are critical and must always be available. You need to configure a Google Kubernetes Engine cluster while optimizing for cost. What should you do?
A. Create a cluster with a single node-pool by using standard VMs. Label he fault-tolerant Deployments as spot_true.
B. Create a cluster with a single node-pool by using Spot VMs. Label the critical Deployments as spot_false.
C. Create a cluster with both a Spot VM node pool and a node pool by using standard VMs. Deploy the critical deployments on the Spot VM node pool and the fault-tolerant deployments on the node pool by using standard VMs.
D. Create a cluster with both a Spot VM node pool and a nods pool by using standard VMs. Deploy the critical deployments on the node pool by using standard VMs and the fault-tolerant deployments on the Spot VM node pool.
Show Answer
Correct Answer: D
Explanation: Use two node pools: a Spot VM node pool for workloads that can tolerate interruptions to reduce cost, and a standard VM node pool for critical workloads that require high availability. Spot VMs can be reclaimed by Google, so they are not appropriate for always-available components.
Question 87
You installed the Google Cloud CLI on your workstation and set the proxy configuration. However, you are worried that your proxy credentials will be recorded in the gcloud CLI logs. You want to prevent your proxy credential from being logged. What should you do?
A. Configure username and password by using gcloud config set proxy/username and gcloud config set proxy/password commands.
B. Encode username and password in sha256 encoding, and save in to a text file. Use filename as a value in the gcloud config set core/custom_ca_certs_file command.
C. Provide values for CLOUDSDK_PROXY_USERNAME and CLOUDSDK_PROXY_PASSWORD in the gcloud CLI tool configuration file.
D. Set the CLOUDSDK_PROXY_USERNAME and CLOUDSDK_PROXY_PASSWORD properties by using environment variables in your command line tool.
Show Answer
Correct Answer: D
Explanation: To prevent proxy credentials from being recorded in gcloud CLI logs, shell history, or the gcloud configuration, set the proxy username and password via the CLOUDSDK_PROXY_USERNAME and CLOUDSDK_PROXY_PASSWORD environment variables. Using `gcloud config set` or storing them in the configuration file can persist the credentials, and the custom CA certificate option is unrelated to proxy authentication.
Question 88
Your application stores files on Cloud Storage by using the Standard Storage class. The application only requires access to files created in the last 30 days. You want to automatically save costs on files that are no longer accessed by the application. What should you do?
A. Create an object lifecycle on the storage bucket to change the storage class to Archive Storage for objects with an age over 30 days.
B. Create a cron job in Cloud Scheduler to call a Cloud Functions instance every day to delete files older than 30 days.
C. Create a retention policy on the storage bucket of 30 days, and lock the bucket by using a retention policy lock.
D. Enable object versioning on the storage bucket and add lifecycle rules to expire non-current versions after 30 days.
Show Answer
Correct Answer: A
Explanation: Use Cloud Storage Object Lifecycle Management to automatically transition objects older than 30 days from Standard to Archive Storage. This is the built-in, recommended mechanism for reducing storage costs while retaining data. Deleting objects is not supported by the stated requirement, which focuses on reducing costs for files no longer accessed by the application rather than removing them. A retention policy does not automate deletion, and object versioning addresses a different use case.
Question 89
You created several resources in multiple Google Cloud projects. All projects are linked to different billing accounts. To better estimate future charges, you want to have a single visual representation of all costs incurred. You want to include new cost data as soon as possible. What should you do?
A. Fill all resources in the Pricing Calculator to get an estimate of the monthly cost.
B. Use the Reports view in the Cloud Billing Console to view the desired cost information.
C. Visit the Cost Table page to get a CSV export and visualize it using Looker Studio.
D. Configure Billing Data Export to BigQuery and visualize the data in Looker Studio.
Show Answer
Correct Answer: D
Explanation: Billing Data Export to BigQuery automatically exports detailed billing data throughout the day from multiple Cloud Billing accounts into BigQuery, where you can build a single consolidated visualization in Looker Studio. Reports are scoped to a single billing account, the Pricing Calculator is only for estimates, and CSV exports are manual rather than providing near-real-time updates.
Question 90
You recently received a new Google Cloud project with an attached billing account where you will work. You need to create instances, set firewalls, and store data in Cloud Storage. You want to follow Google-recommended practices. What should you do?
A. Use the gcloud CLI services enable cloudresourcemanager.googleapis.com command to enable all resources.
B. Use the gcloud services enable compute.googleapis.com command to enable Compute Engine and the gcloud services enable storage-api.googleapis.com command to enable the Cloud Storage APIs.
C. Open the Google Cloud console and enable all Google Cloud APIs from the API dashboard.
D. Open the Google Cloud console and run gcloud init --project in a Cloud Shell.
Show Answer
Correct Answer: B
Explanation: A new Google Cloud project typically requires enabling the APIs for the services you intend to use. Compute Engine must be enabled to create VM instances and manage firewall rules, and Cloud Storage API access is enabled via the storage API. Enabling all APIs is not recommended, and running gcloud init only configures the CLI, not project services. Enabling Cloud Resource Manager does not enable all resources.
Question 91
Your company has a large quantity of unstructured data in different file formats. You want to perform ETL transformations on the data. You need to make the data accessible on Google Cloud so it can be processed by a Dataflow job. What should you do?
A. Upload the data to BigQuery using the bq command line tool.
B. Upload the data to Cloud Storage using the gcloud storage command.
C. Upload the data into Cloud SQL using the import function in the Google Cloud console.
D. Upload the data into Cloud Spanner using the import function in the Google Cloud console.
Show Answer
Correct Answer: B
Explanation: Cloud Storage is the appropriate service for storing large amounts of unstructured data in various file formats. Google Cloud Dataflow can read directly from Cloud Storage for ETL processing. BigQuery, Cloud SQL, and Cloud Spanner are structured data stores and are not the appropriate initial landing location for heterogeneous unstructured files.
$19
Get all 323 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.