GCP Cloud Operations (formerly Stackdriver) Flashcards

1
Q

Log exports can go to which of the following destinations?

A) Cloud Bigtable
B) Cloud Storage
C) Cloud SQL
D) BigQuery

A

Answer: B & D - Cloud Storage & Cloud BigQuery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

The cloud logging agent can be installed on which resource?

A) App Engine
B) Cloud Run
C) Computer Engine
D) Cloud Functions

A

Answer: C - Compute Engine

The following VM instances support Logging using their own software, so manually installing the Logging agent on them is not supported: App Engine, Cloud Run, Kubernetes Engine, Anthos Clusters on VMs, Cloud Functions.

Find out more:
https://cloud.google.com/logging/docs/agent/logging

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

You need an inexpensive solution for storing log entries long-term. Which destination should you use for the log sink? *

A) Cloud Pub/Sub
B) Cloud Storage Bucket
C) Cloud Bigtable
D) BigQuery

A

Answer: B - Cloud Storage

Send log entries to Cloud Storage for inexpensive, long-term storage. Cloud Storage buckets; provides that inexpensive, long-term storage.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

You are a project owner and need your co-worker to deploy a new version of your application to App Engine. You want to follow Google’s recommended practices. Which IAM roles should you grant your co-worker? *

A) Project Editor
B) App Engine Service Admin
C) App Engine Deployer
D) App Engine Code Viewer

A

Answer: C - App Engine Deployer

C is correct because this gives write access only to create a new version, and it also follows the best practice of least-privilege.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

You want to create a new role for your colleagues that will apply to all current and future projects created in your organization. The role should have the permissions of the BigQuery Job User and Cloud Bigtable User roles. You want to follow Google’s recommended practices. How should you create the new role? *

A) Use “gcloud iam combine-roles –global” to combine the 2 roles into a new custom role.
B) For one of your projects, in the Google Cloud Platform Console under Roles, select both roles and combine them into a new custom role. Use “gcloud iam promote-role” to promote the role from a project role to an organization role.
C) For all projects, in the Google Cloud Platform Console under Roles, select both roles and combine them into a new custom role.
D) For your organization, in the Google Cloud Platform Console under Roles, select both roles and combine them into a new custom role.

A

Answer: D - For your organization, in the Google Cloud Platform Console under Roles, select both roles and combine them into a new custom role.

D is correct because this creates a new role with the combined permissions on the organization level. It is the easiest way to do so.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What open source program is the “Cloud Agent” software using to collect stats from a VM?

A

Answer: collectd

collectd gathers metrics from various sources, e.g. the operating system, applications, logfiles and external devices, and stores this information or makes it available over the network. Those statistics can be used to monitor systems, find performance bottlenecks (i.e. performance analysis) and predict future system load (i.e. capacity planning).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly