GCP Flashcards

1
Q

You have downloaded the SDK kit from Google and now would like to
manage containers on GKE with gcloud. What command would be typed to
install kubectl in the CLI?

A. Gcloud components install kubectl
B. Gcloud components kubectl install
C. Gcloud components install kubernetes
D. Gcloud components install components kubectl

A

A. gcloud components install kubectl
Explanation: Using gcloud is very important for this cloud engineer exam
around Kubernetes. The gcloud commands are what interact with GCP
resources that create and manage the clusters and then the kubectl, which is
the Kubernetes command line tool is used to run commands against
Kubernetes clusters on GKE.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A recent software update to your enterprises e-commerce website that is
running on Google Cloud has caused the website to crash for several hours.

Your CTO decides that all critical changes must now have a back-out/roll-
back plan. The website is deployed on hundreds of virtual machines (VMs),

and critical changes are frequent.
Which two actions should you take to implement the back-out/roll-back
plan??

A. Use managed instance groups with the “update-instances”
command when starting a rolling update
B. Enable object versioning on the website’s static data files stored
in Google Cloud Storage
C. Create a new instance template with applied fixes and roll out
via A/B test
D. Use unmanaged instance groups with the “update-instances”
command when starting a rolling update

A

Correct Answer(s): B. Processor
Explanation: Use managed instance groups to provide updates and object
versioning will ensure that you can get back to the previous stable version.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Your company uses a third-party monitoring solution for your
enterprise apps. You are using Kubernetes Engine for your container
deployments and would like to enable this internal monitoring app for
Kubernetes clusters. What would be the best approach? (Select One)
A. Deploy the monitoring pod as a DaemonSet.
B. Deploy the monitoring pod as a cluster
C. Deploy the monitoring extension for Stackdriver Trace
D. Deploy a solution from the Cloud Marketplace

A

Correct Answer(s): A. Deploy the monitoring pod as a DaemonSet.
Explanation: Many monitoring solutions use the Kubernetes DaemonSet
structure to deploy an agent on every cluster node. S Note that each tool has
its own software for cluster monitoring. Heapster is another option that could
also be used, Heapster is a bridge between a cluster and a storage designed to
collect the cluster metrics. Stackdriver is native to Google Cloud and
therefore the recommended approach by Google Cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

App Engine services are specified(designed) to be _________?

A. Regional
B. Global
C. Multi-regional
D. Zonal

A

Correct Answer(s): A. Regional
Explanation: App Engine is a regional service , which means the
infrastructure that runs your apps is located in a specific region. This region
cannot be moved nor migrated. It is managed by Google to be redundantly
available across all the zones within that region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q
  1. The Monitoring agent, ________________, is based on the original
    collectd system statistics collection daemon? (Select One)

A. Stackdriver-agent
B. Stackdriver-agent-collectd
C. Stackdriver-collectd
D. Stackdriver-statsd

A

Correct Answer(s): A. Stackdriver-agent
Explanation: The Stackdriver Monitoring agent is a collectd-based daemon
that gathers system and application metrics from virtual machine instances
and sends them to Stackdriver
Monitoring. cloud.google.com/monitoring/agent/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q
  1. You are currently deploying an application on a Kubernetes cluster.
    Your aware that a Deployment’s rollout is triggered if and only if the
    Deployment’s pod template is changed, for example if the labels or
    container images of the template are updated. Other updates, such as scaling
    the Deployment, do not trigger a rollout. What is the file name that would
    need to be changed? (Select One)
    A. .spectemplate.yaml
    B. App.py
    C. .template.yaml
    D. .spec.template
A

Correct Answer(s): D. .spec.template is a deployment template.
Explanation: A Deployment’s rollout is triggered if and only if the
Deployment’s Pod template is changed.

https://kubernetes.io/docs/concepts/workloads/controllers/deployment/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q
  1. You are currently looking at your GCP platform with gcloud and
    would like to list all the instances in GCP Compute Engine. What command
    would you use? (Select One)
    A. gcloud compute instances grep
    B. gcloud grep compute instances
    C. gcloud compute list instances
    D. gcloud compute instances list
A

Correct Answer(s): D. gcloud compute instances list
Explanation: Review the gcloud documentation site for command syntax
https://cloud.google.com/sdk/gcloud/reference/compute/instances/list

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q
  1. __________________is a unified programming model and also a
    managed service for developing and executing a wide range of data
    processing patterns including ETL, batch computation, and continuous
    computation. What is the service? (Select One)
    A. Cloud Datalab
    B. Cloud Dataflow
    C. Cloud Dataproc
    D. Cloud Spanner
A

Correct Answer(s): B. Cloud Dataflow
Explanation: Cloud Dataflow is a unified programming model and a managed
service for developing and executing a wide range of data processing patterns
including ETL, batch computation, and continuous computation. The
challenge with a lot of the GCP services is that they sound the same or have
the same prefix which can be confusing.
https://cloud.google.com/sdk/gcloud/reference/dataflow/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q
  1. Your considering placing your Infrastructure as code processes on Cloud
    Deployment Manager. What would be a risk of doing this? (Select One)

A. Cloud Deployment Manager requires a Google APIs service
account to run.
B. Cloud Deployment Manager APIs could be deprecated in the
future.
C. Cloud Deployment Manager can be used to permanently delete
cloud resources.
D. Cloud Deployment Manager takes some training to use.

A

Correct Answer(s): B. Cloud Deployment Manager.
Explanation: APIs could be deprecated in the future.
APIs of course take maintenance. Other choices would likely not be a risk.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

10 You are currently reviewing your project in GCP using gcloud. You
would like to confirm what the DNS related info is for a project. What is the
command to do this? Select One
(Select One)
A. gcloud dns project-info describe
B. gcloud dns project-info list
C. gcloud dns project-info show
D. gcloud dns project-info grep

A

Correct Answer(s): A. gcloud dns project-info describe
Explanation: gcloud commands need to be memorized. The easy way to
rule out two answers is generally to look at the service which should come
after gcloud. If the answer is flag related, then we need to memorize in most
cases. https://cloud.google.com/sdk/gcloud/reference/dns/project-info/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q
  1. You are evaluating new GCP services and would like to use tools to
    help you evaluate the costs of using GCP. What are two tools available from
    GCP to help analyse costs. (Select Two)
    A. Pricing Calculator
    B. ROI Calculator
    C. TCO Tool
    D. Cost Optimization Tool
A

Correct Answer(s): A and C: Pricing Calculator and TCO Tool

Explanation. For this exam. Expect several questions on pricing Bigtable and
Storage. You can also take advantage of some tools to help you evaluate the
costs of using GCP. The pricing calculator provides a quick and easy way to
estimate what your GCP usage will look like. You can provide details about
the services you want to use, such as the number of Compute Engine
instances, persistent disks and their sizes, and so on, and then see a pricing
estimate.
https://cloud.google.com/products/calculator
The Total Cost of Ownership (TCO) Tool evaluates the relative costs for
running your compute load in the cloud and provides a financial estimate.
The tool provides several inputs for cost modelling, which you can adjust,
and then compares estimated costs on GCP and AWS. This tool does not
model all components of a typical application, such as storage and
networking.
https://inthecloud.withgoogle.com/tco-assessment-19/form.html

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q
  1. You would like to create a new container repository with Cloud Source
    Repositories using gcloud. What would be the command to create a repo
    called “devops” (Select One)

A. gcloud source repo create devops
B. gcloud source repos create devops
C. gcloud create source repos “devops”
D. gcloud create source repos devops

A

Correct Answer(s): B. gcloud source repos create devops
Explanation. Note on the cloud engineer exam. There were a few questions
that required exact syntax knowledge for devops services such as Cloud
Build, Cloud Source Repo and Container Registry
gcloud source repo create devops

https://cloud.google.com/source-repositories/docs/creating-an-empty-
repository

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Your currently ready to deploy some Cloud Deployment Manager
templates and you will need to ensure specific requirements (“explicit”) exists
before the templates deploy. What would be the option you would add to
your templates or configuration files? (Select One)

A. dependsOn
B. properties
C. variables
D. deployON

A

Correct Answer(s): A. dependsOn
Explanation. “dependsOn” You can specify these dependencies using the
dependsOn option in your configuration files or templates. When you add the
dependsOn option for a resource, Deployment Manager creates or updates the
dependencies before creating or updating the resource.

https://cloud.google.com/deployment-manager/docs/configuration/create-
explicit-dependencies

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q
  1. By default you can create up to _______ networks per project. (Select
    One)

A. 10
B. 100
C. 5
D. 50

A

Correct Answer(s): C. 5
Explanation. By default ,the limit is 5 per project. You can contact support to
have this adjusted as needed. The exam has a few trivia around projects and
quotas.
https://cloud.google.com/vpc/docs/using-vpc

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q
  1. You would like to deploy a LAMP stack for your development team.
    The only issue is you’re not sure how to configure this LAMP stack. You
    would like to use a solution that has readymade templates to deploy. What
    GCP service could you use (Select One)

A. Cloud Deployment Manager
B. Cloud Marketplace
C. Cloud Endure
D. Cloud DataFlow

A

Correct Answer(s): B. Cloud Marketplace
Explanation: Google Cloud Marketplace formerly Cloud Launcher offers
ready-to-go development stacks, solutions, and services to accelerate
development, so you spend less time installing and more time developing.
https://cloud.google.com/launcher/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q
  1. You would like to create a file structure for Cloud Storage that can be
    mounted to Compute Engine. What would be the best option? (Select One)

A. Fuse Tool
B. Samba
C. NFS
D. Use Filestore

A

Explanation: You can use the Google Cloud Storage FUSE tool to mount a
Cloud Storage bucket to your Compute Engine instance. The mounted bucket
behaves similarly to a persistent disk even though Cloud Storage buckets are
object storage. To learn how to mount a Cloud Storage bucket on your
instance, read Using Cloud Storage FUSE.
https://cloud.google.com/compute/docs/disks/gcs-buckets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q
  1. The__________ Tier delivers traffic over Google’s well-provisioned,
    low latency, highly reliable global network. (Select One)

A. Standard
B. Premium
C. Cloud VPN
D. Cloud Interconnect

A

Correct Answer(s): B. Premium

Explanation: The Premium Tier delivers traffic over Google’s well-
provisioned, low latency, highly reliable global network.

https://cloud.google.com/network-tiers/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q
  1. You are designing a CD Pipeline and would like to have your source
    code hosted on GKE, Build Automation and Artifact Management with
    GCP Services. Your currently using Spinnaker for your code deployment.

A. Cloud Source Repositories, Cloud Build, GKE
B. Cloud Build, Cloud Source Repositories, Container
Registry
C. Cloud Source Repositories, Cloud Build, Container
Registry
D. Kubernetes Engine, Cloud Source Repositories, Container
Registry

A

A. Cloud Source Repositories, Cloud Build, GKE
B. Cloud Build, Cloud Source Repositories, Container
Registry
C. Cloud Source Repositories, Cloud Build, Container
Registry
D. Kubernetes Engine, Cloud Source Repositories, Container
Registry

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q
  1. You have just started your cluster and deployed your pods. You now
    need to view all the running pods. What is the proper CLI syntax to
    accomplish this task? (Select One)

A. kubectl get pods
B. kubectl list pods
C. gcloud get pods
D. gcloud list pods

A

Correct Answer(s): A: kubectl get pods
Explanation: The command syntax to inspect pods is the same as you would
use for your on-premises deployments. kubectl get pods

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q
  1. You have been contacted by the enterprise support team which has told
    you there have reports of significant latency at specific times for an
    application running on GCP. They would like you to review the issue and
    provide them insight into why the application is latent at specific times?
    What Google Cloud service could you use to inspect latency data that has
    been collected in near real time? (Select One)

A. Stackdriver Debug
B. Stackdriver Trace
C. VPC Trace Logs
D. Stackdriver Profiler

A

Correct Answer(s): A: Stackdriver Trace (Cloud Trace)
Explanation: Cloud Trace formerly Stackdriver Trace is a distributed tracing
system that collects latency data from your applications and displays it in the
Google Cloud Console. You can track how requests propagate through your
application and receive detailed near real-time performance insights. Cloud
Trace automatically analyses all your application’s traces to generate in-depth
latency reports to surface performance degradations and can capture traces
from all your VMs, containers, or App Engine projects.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q
  1. The Organization resource is the root node in the Google Cloud Platform
    hierarchy and is the hierarchical super node of projects. What are the types of
    customers an organization resource is available for? (Select Two)
    A. GSuite
    B. Gmail
    C. Google for Education
    D. Cloud Identity
A

Correct Answer(s): A and D: Gsuite and Cloud Identity
Explanation: An Organization resource is available for G Suite and Cloud
Identity customers. Organizations are confusing at first, but for this exam, we
need to understand some high-level details and what an Org Administrator is
about as well. https://cloud.google.com/resource-manager/docs/creatingmanaging-
organization

22
Q
  1. In GCP there are two types of managed instance groups.
    (Select Two)
    A. Zonal
    B. Regional
    C. Global
    D. GDPR
A

Correct Answer(s): A, B Zonal and Regional
Explanation: You can create two types of managed instance groups: A zonal
managed instance group, which contains instances from the same zone. A
regional managed instance group, which contains instances from multiple
zones across the same region. Lastly, don’t confused over an unmanaged
instance group.
https://cloud.google.com/compute/docs/instance-groups/

23
Q
  1. Which of the following features are supported by GCP Cloud Storage?
    (Select Two)
    A. Object Versioning
    B. Object Lifecycle Management
    C. Object Analysis Management
    D. Object Antivirus Scanning
A

Correct Answer(s): A. Object Versioning and Object Lifecycle Management
Explanation: Object Lifecycle and Object
Versioning https://cloud.google.com/storage/docs/lifecycle

24
Q
  1. You’re currently being summoned to the CIO office and he would like to
    have a copy of the billing reports from Google Cloud Platform. What answer
    has the correct formats you can export billing info to? (Select One)
    A. CSV or JSON
    B. CSV or XML
    C. JSON or XML
    D. JSON or .Doc
A

Correct Answer(s): A: CSV or JSON
Explanation: To access a detailed breakdown of your charges, you can
export your daily usage and cost estimates automatically to a CSV or JSON
file stored in a Google Cloud Storage bucket you specify.
https://cloud.google.com/billing/docs/how-to/export-data-file

25
Q
  1. Which of the following is not possible using primitive roles in GCP?
    (Select One)
    A. Allows a user access to view all datasets in a project, but
    not run queries on them.
    B. Allows Development owner access and Production editor
    access for all datasets in a project.
    C. Allows a user access to view all datasets in a project only
    D. None of the above
A

Correct Answer(s): A: Allows a user access to view all datasets in a project,
but not run queries on them.
Explanation: Primitive roles can be used to give owner, editor, or viewer
access to a user or group, but they can’t be used to separate data access
permissions from job-running permissions. Reference:
https://cloud.google.com/bigquery/docs/access-control#primitive_iam_roles

26
Q
  1. You are getting to migrate VMS from your onsite datacenter to GCP
    Compute Engine. What is the gcloud command to import images and create a
    bootable image? (Select One)
    A. gcloud compute images import
    B. gcloud compute import images
    C. gcloud compute images “import”
    D. gcloud compute import “images”
A

Correct Answer(s): A gcloud compute images import
Explanation: Remember to learn the syntax gcloud compute images
import https://cloud.google.com/compute/docs/images/importing-virtualdisks

27
Q
  1. You’re currently considering moving your on-premises CI pipeline from
    on premises to Google Cloud Platform. You would like to have code
    maintained in a private Git repository which is hosted on the Google Cloud
    Platform. What service would you choose? (Select One)
    A. Container Registry
    B. Kubernetes Engine
    C. Cloud Source Repositories
    D. Cloud Build
    E. Cloud Run
A

Correct Answer(s): C. Cloud Source Repositories
Explanation: Cloud Source Repositories is a secure hosted private Git on
Google Cloud. https://cloud.google.com/source-repositories/

28
Q
  1. Google Cloud has both types of services that are “ops and no-ops”
    management requirements when as referring to customizability with compute
    services. How would you rank the four compute services on a scale ranging
    from the fewest management requirements and lowest customizability to the
    most management requirements and highest customizability? (Select One)
    A. Cloud Functions, Compute Engine, Kubernetes Engine,
    App Engine
    B. Cloud Functions, Kubernetes Engine, App Engine Compute
    Engine
    C. Cloud Functions, App Engine, Kubernetes Engine,
    Compute Engine
    D. Cloud Functions, App Engine, Compute Engine,
    Kubernetes Engine
A

Correct Answer(s): C. Cloud Functions, App Engine, Kubernetes Engine,
Compute Engine
Explanation: Google has compute services that are managed which are
considered No-Ops and other services that are Lo-Ops.
https://cloud.google.com/docs/overview/cloud-platform-services#computinghosting

29
Q
  1. You have been contacted by your CIO to improve your application
    availability. You have decided to use instance groups by spreading your
    instances across three zones. What type of instance group do you select?
    (Select One)
    A. Multi-Regional managed groups
    B. Multi-Zonal managed groups
    C. Regional managed groups
    D. Zonal managed groups
A

Correct Answer(s): A. Multi-Regional managed groups
Explanation: An instance group is a collection of virtual machines (VM)
instances that you can manage as a single entity. There are two types
Managed and Unmanaged Instance Groups.
https://cloud.google.com/compute/docs/instance-groups/creating-groups-ofmanaged-
instances

30
Q
  1. Cloud SQL is a fully managed database service. What three variations of
    SQL does Cloud SQL Support? (Select Three)
    A. MYSQL
    B. NewSQL
    C. MS SQL
    D. Oracle SQL
    E. Postgres SQL
A

Correct Answer(s): E. PostgreSQL and A.My SQL and now C.MS SQL
Explanation: Cloud SQL supports three main SQL versions
https://cloud.google.com/sql/

31
Q
  1. You have just deployed your application on App Engine standard in the
    following region.
    us-east4 (Northern Virginia
    What is the required process to change your App Engine instance from
    Northern Virginia to?
    europe-west (Belgium)
    Select the best answer. (Select One)
    A. App Engine is a regional service so if you move it has to be
    in the same region
    B. App Engine is a global service so just
    run http://[YOUR_PROJECT_ID].appspot.com.
    C. App Engine is a regional service so just
    run http://[YOUR_PROJECT_ID].appspot.com.
    D. App Engine is a regional service so the region can’t be
    changed after its set
A

Correct Answer(s): D. App Engine is a regional service so the region can’t be
changed after its set
Explanation: You cannot change an app’s region after you set it. If you
already created an App Engine application, you can view the region by
running the gcloud app describe command or opening the App Engine
Dashboard in the GCP Console. The region of your App Engine application
is listed under http://[YOUR_PROJECT_ID].appspot.com.

32
Q
  1. You’re currently working with several contractors. They are using Cloud
    Storage buckets for dropping files for review and your company’s approval.
    Which of the following should you NOT perform? (Select One)
    A. Create a separate bucket for each vendor.
    B. Give each vendor the roles/storage.objectAdmin for their
    respective bucket.
    C. Give each vendor the roles/owner for their respective
    bucket.
    D. Give them a link to their bucket, which has the format:
    console.cloud.google.com/storage/browser/[BUCKET_NAME]
A

Correct Answer(s): D. Give them a link to their bucket, which has the
format…
Explanation: Now you would almost never give temporary users, partners or
non-employee owner rights. This is a best practice
https://cloud.google.com/storage/docs/collaboration

33
Q
  1. When learning about external IP addresses in GCP which of the
    following is NOT correct? (Select One)
    A. Assigned from a pool
    B. Assigned from an internal static address
    C. Assigned from an external static address
    D. VM does not know its address but its mapped internally to
    an internal IP
A

Correct Answer(s): D. VM does not know its address but its mapped
internally to an internal IP
Explanation: VM does not know its address but its mapped internally to an
internal IP https://cloud.google.com/compute/docs/ip-addresses/reservestatic-
external-ip-address

34
Q
  1. Your users are only uploading resources (writing) to an access-controlled
    bucket. You can use the _____________________functionality of Cloud
    Storage to require only one signed URL. (Select One)
    A. Resumable uploads
    B. Controlled uploads
    C. Authenticated uploads
    D. Signed uploads by URL
A

Correct Answer(s): D. Signed uploads by URL
Explanation: If your users are only uploading resources (writing) to an
access-controlled bucket, you can use the resumable uploads functionality of
Cloud Storage to require only one signed URL. This signed URL is part of
the initial POST request, during which no data is actually uploaded.
https://cloud.google.com/storage/docs/access-control/signed-urls

35
Q
  1. VPC Network Peering allows you to peer two VPC networks so that the
    VMs in the two networks can communicate via internal, private IP addresses.
    Which of the following is NOT true about Network Peering? (Select One)
    A. VPC Network Peering works with Compute Engine and
    App Engine Standard
    B. Peering can be configured for one VPC network even
    before the other VPC network is created.
    C. A given VPC network can peer with multiple VPC
    networks
    D. VPC Network Peering works with Compute
    Engine and App Engine Flexible
A

Correct Answer(s): A .VPC Network Peering works with Compute Engine
and App Engine Standard
Explanation: Does not support App Engine
Standard. https://cloud.google.com/vpc/docs/vpc-peering

36
Q
  1. You have been asked by your customer to move their “in house”
    application to App Engine. Customer would like to know what runtimes are
    supported. Which of the following are the supported programming
    languages? (Select Four)
    A. Python
    B. PHP
    C. Rust
    D. Perl
    E. Go
    F. Java
    G. Solidity
A

Correct Answer(s): A,B, E and F- Python, PHP, Go and Java
Explanation: Make sure you know the supported languages for standard for
the exam. https://cloud.google.com/appengine/downloads

37
Q
  1. You company is going to be testing user provisioning with Google
    services. You want to manually provision users for testing or other
    purposes manually by using the_________________ (Select One)
    A. Gmail Console
    B. Gsuite Admin Console
    C. GCP Console
    D. Open ID
A

Correct Answer(s): B Gsuite Admin Control
Explanation: G Suite Admin Console To manually provision users for
testing or other purposes, Cloud Platform administrators can provision users
and their associations with groups and organizations manually by using the G
Suite Admin Console. https://cloud.google.com/docs/enterprise/bestpractices-
for-enterprise-organizations

38
Q
  1. The VM instances quota is also a _____________quota and limits the
    number of VM instances that can exist in a given __________, regardless of
    whether the VM is running or not. (Select One)
    A. Region, Regional
    B. Regional, Region
    C. Zonal, Regional
    D. Zonal, Global
A

Correct Answer(s): B. Regional, Region
Explanation: The VM instances quota is also a regional quota and limits the
number of VM instances that can exist in a given region, regardless of
whether the VM is running or
not https://cloud.google.com/compute/quotas

39
Q
  1. You need to create many projects for many different teams. You want
    to use a Cloud Deployment Manager (DM) deployment to create those
    projects in a folder called devops1.
    What should you do? (Select One)

A. This cannot be done. Use Terraform since it supports teams
better.
B. Create a project called devops1 and enable appropriate
APIs. Grant the project creator role to the service account
Use command “gcloud deployment-manager deployments
create -project devops1
C. Create a project called devops1 and enable appropriate
APIs. Grant the project owner role to the service account
Use command “gcloud deployment-manager deployment
create -project devops1
D. Create a project called devops1 and enable appropriate
APIs. Grant the organization role to the service account
Use command “gcloud deployment-manager deployments
create new -project devops1

A

Correct Answer(s): B. Create a project called devops1 and enable appropriate
APIs. Grant the project creator role to the service account Use command
“gcloud deployment-manager deployments create -project devops1
Explanation: The best option is to allow for the project creator role. (never
owner) for a service account. Command syntax is correct

40
Q
  1. The maximum number of subnets in a project is how many? (Select
    One)
    A. 10
    B. 100
    C. 125
    D. 1250
A

Correct Answer(s): B. 100
Explanation: The default limit is 100. You can view this in your GCP
project

41
Q
  1. What is the maximum size of a log entry with logging (Select One)
    A. 128
    B. 256
    C. 512
    D. 127
A

Correct Answer(s): B. 256
Explanation: Don’t confuse the length of the logging retention or metrics for
example. Note 256 is approximate limit is based on internal data sizes, not
the actual REST API request size. https://cloud.google.com/logging/quotas

42
Q
  1. What does Cloud Logging in Google Cloud include as part of the
    service? (Select Three)
    A. User Interface (Logs Viewer)
    B. API for programmatic access
    C. Storage for logs
    D. Analytics Tools
    E. Kubernetes Logging extensions.
A

Correct Answer(s): A, B, C. User Interface (Logs Viewer) B, API for
programmatic access and C. Storage for logs.
Explanation: Cloud Logging is integrated with Stackdriver but there are no
analytics or special extensions for Kubernetes. There are Kubernetes metrics
used. Stackdriver is the default logging solution for clusters deployed on
Google Kubernetes Engine. Stackdriver Logging is deployed to a new cluster
by default unless you explicitly opt-out.
https://kubernetes.io/docs/tasks/debug-application-cluster/loggingstackdriver/

43
Q
  1. What is the default retention period for Admin Activity Logs? (Select
    One)
    A. 30 days
    B. 400 days
    C. 500 days
    D. 31 days
A

Correct Answer(s): B: 400
Explanation: There is some trivia on the exam around logging. We need to
know both 400 and 30 days. In the Stackdriver section is a table that list there
for Admin Activity, Data Access, etc.
https://cloud.google.com/logging/quotas

44
Q
  1. Using gsutil you can download text files from a bucket by using what
    gsutil command? (Select One)
    A. gsutil cp gs://my-bucket/.files
    B. gsutil dn gs://my-bucket/
    .txt
    C. gsutil copy gs://my-bucket/.txt
    D. gsutil cp gs://my-bucket/
    .txt
    Correct
A

Correct Answer(s): D gsutil cp gs://my-bucket/*.txt
Explanation: We will need to know a wide range of gcloud commands and
gsutil is part of the objectives. Gsutil is used for managing Cloud Storage.
https://cloud.google.com/storage/docs/gsutil/commands/cp

45
Q
  1. You would like to obtain the current IAM Policy for a project called myproject
    test. What would be the correct syntax? (Select One)
    A. gcloud set-iam-policy project my-project-test
    B. gcloud projects get-iam-policy my-project-test
    C. gcloud projects get-iam-policy –my-project-test
    D. gcloud get-iam-policy my-project-test
A

Correct Answer(s): B: gcloud projects get-iam-policy my-project-test
Explanation: We will need to know a wide range of gcloud commands and
managing projects are part of the objectives. gcloud projects get-iam-policy
my-project-test https://cloud.google.com/sdk/gcloud/reference/config/set

46
Q
  1. GCLOUD wide commands. These flags are available to all commands.
    Which is NOT a gcloud wide command? (Select One)
    A. –account
    B. –configuration
    C. –help
    D. –verbose
A

Correct Answer(s): D: –verbose
Explanation: -verbose is incorrect. The flag for verbose is verbosity.
GCLOUD WIDE FLAGS These flags are available to all commands: –
account, –configuration, –flatten, –format, –help, –log-http, –project, –
quiet, –trace-token, –user-output-enabled, –verbosity. Run $ gcloud help for
details. https://cloud.google.com/sdk/gcloud/reference/version

47
Q
  1. What page in the GCP Billing page contains details about your costs and
    payment information? Select One
    (Select One)
    A. History
    B. Billing and Invoicing
    C. Payments
    D. Organizations
A

Correct Answer(s): A: History
Explanation: Your billing account’s History page contains details about your
costs and payment information. Here, you can: View transactions and sort by
transaction types. Sort your account’s payment information.
https://cloud.google.com/billing/docs/how-to/view-history

48
Q
  1. When considering storage options for your virtual machines in Compute
    Engine the choices can be confusing when costing is not the main concern.
    Without costing being a concern, what type of storage would provide fast and
    reliable block storage and scale to 64TB? (Select One)
    A. Standard Persistent
    B. SSD Persistent
    C. Local SSD
    D. Cloud Storage Buckets
A

Correct Answer(s): B: SSD Persistent
Explanation: SSD Persistent Fast and reliable block storage Fast and reliable
block storage Fast and reliable block storage with synchronous replication
across two zones in a region https://cloud.google.com/compute/docs/disks/

49
Q
  1. Compute Engine blocks or restricts traffic through all of the following
    ports/protocols between the Internet and virtual machines, and between two
    virtual machines when traffic is addressed to their external IP addresses
    through these ports (this also includes load-balanced addresses). These ports
    are permanently blocked; they cannot be opened using firewall rules. What
    ports are blocked in Compute Engine? (Select Three)

A. All outgoing traffic to port 25 (SMTP) is blocked.
B. All traffic coming from on premises
C. GRE traffic is blocked, even between VMs
D. Most outgoing traffic to port 465 or 587 (SMTP over SSL)
is blocked, except for known Google IP addresses
E. All outgoing traffic to port 22 (SSH) is blocked.

A

Correct Answer(s): A, C and D:
Explanation: All outgoing traffic to port 25 (SMTP) is blocked. Most
outgoing traffic to port 465 or 587 (SMTP over SSL) is blocked, except for
known Google IP addresses. GRE traffic is blocked, even between VMs.
Traffic that uses a protocol other than TCP, UDP, ICMP, and IPIP is blocked,
unless explicitly allowed through protocol forwarding.
https://cloud.google.com/compute/docs/networks-and-firewalls

50
Q
  1. Cloud SQL is a fully managed SQL database service. You need to scale
    this service for reads and writes. What type of scaling would you want to
    use? (Select One)
    A. Horizontally
    B. Vertically
    C. Diagonally
    D. None of the above
A

Correct Answer(s): B: Vertically
Explanation: Vertical for writes and reads. If you need horizontally scaling
SQL use Cloud Spanner for distributed nodes.
https://cloud.google.com/storage-options/