Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

PCA > Study Questions > Flashcards

Study Questions Flashcards

1
Q

You are using Cloud SQL as the database backend for a large CRM deployment. You want to scale as usage increases and ensure that you don’t run out of storage, maintain 75% CPU usage cores, and keep replication lag below 60 seconds. What are the correct steps to meet your requirements?

A

shard the database to reduce replication time

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

relational database that can operate on hundreds of terabytes of data, analytics

A

Bigquery

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

You want your Google Kubernetes Engine cluster to automatically add or remove nodes based on CPU load.

A

Enable the Cluster Autoscaler from the GCP Console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Your BigQuery project has several users. For audit purposes, you need to see how many queries each user ran in the last month. What should you do?

A

Use Cloud Audit Logging to view Cloud Audit Logs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Your company captures all web traffic data in Google Analytics 360 and stores it in BigQuery. Each country has its own dataset. Each dataset has multiple tables.
You want analysts from each country to be able to see and query only the data for their respective countries.
How should you configure the access rights?

A

Grant the ‘all_analysts’ group the IAM role of BigQuery jobUser. Share the appropriate dataset with

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Your customer runs a web service used by e-commerce sites to offer product recommendations to users. The company has begun experimenting with a machine learning model on Google Cloud Platform to improve the quality of results.
What should the customer do to improve their model’s results over time?

A

Save a history of recommendations and results of the recommendations in BigQuery, to be used as training data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Your company creates rendering software which users can download from the company website. Your company has customers all over the world. You want to minimize latency for all your customers. You want to follow Google-recommended practices.
How should you store the files?

A

“Save the files in multiple Multi-Regional Cloud Storage buckets, one bucket per multi-region.”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

You need to ensure reliability for your application and operations by supporting reliable task scheduling for compute on GCP. Leveraging Google best practices, what should you do?

A

Using the Cron service provided by App Engine

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

You are implementing a single Cloud SQL database that contains business-critical transaction data. You want to ensure that the minimum amount of data is lost in case of catastrophic failure.

A

“Binary logging and automated backups”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Your company has just acquired another company, and you have been asked to integrate their existing Google Cloud environment into your company’s data center. Upon investigation, you discover that some of the RFC 1918 IP ranges being used in the new company’s Virtual Private Cloud (VPC) overlap with your data center IP space. What should you do to enable connectivity and make sure that there are no routing conflicts when connectivity is established?

A

create a Cloud NAT instance to perform NAT on the overlapping IP space.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

You have an application that runs in Google Kubernetes Engine (GKE). Over the last 2 weeks, customers have reported that a specific part of the application returns errors very frequently. You currently have no logging or monitoring solution enabled on your GKE cluster. You want to diagnose the problem, but you have not been able to replicate the issue. You want to cause minimal disruption to the application. What should you do?

A

Update your GKE cluster to use Cloud Operations for GKE. 2. Use the GKE Monitoring dashboard to investigate logs from affected Pods”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Your company has an application deployed on Anthos clusters (formerly Anthos GKE) that is running multiple microservices. The cluster has both Anthos Service
Mesh and Anthos Config Management configured. End users inform you that the application is responding very slowly. You want to identify the microservice that is causing the delay. What should you do?

A

“Use the Service Mesh visualization in the Cloud Console to inspect the telemetry between the microservices. “

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

You are developing an application using different microservices that should remain internal to the cluster. You want to be able to configure each microservice with a specific number of replicas. You also want to be able to address a specific microservice from any other microservice in a uniform way, regardless of the number of replicas the microservice scales to. You need to implement this solution on Google Kubernetes Engine. What should you do?

A

Deploy each microservice as a Deployment. Expose the Deployment in the cluster using a Service, and use the Service DNS name”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Your company has a networking team and a development team. The development team runs applications on Compute Engine instances that contain sensitive data. The development team requires administrative permissions for Compute Engine. Your company requires all network resources to be managed by the networking team. The development team does not want the networking team to have access to the sensitive data on the instances. What should you do?

A

Create a project with a Shared VPC and assign the Network Admin role to the networking team. 2. Create a second project without a VPC, configure it as a Shared VPC service project, and assign the Compute Admin role to the development team.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Your team needs to create a Google Kubernetes Engine (GKE) cluster to host a newly built application that requires access to third-party services on the internet.
Your company does not allow any Compute Engine instance to have a public IP address on Google Cloud. You need to create a deployment strategy that adheres to these guidelines. What should you do?

A

Configure the GKE cluster as a private cluster, and configure Cloud NAT Gateway for the cluster subnet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

You have deployed an application on Anthos clusters (formerly Anthos GKE). According to the SRE practices at your company, you need to be alerted if request latency is above a certain threshold for a specified amount of time. What should you do?

A

“Install Anthos Service Mesh on your cluster. Use the Google Cloud Console to define a Service Level Objective (SLO), and create an alerting policy based on this SLO.”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Your company places a high value on being responsive and meeting customer needs quickly. Their primary business objectives are release speed and agility. You want to reduce the chance of security errors being accidentally introduced.
Which two actions can you take? (Choose two.)

A

Use source code security analyzers as part of the CI/CD pipeline Most Voted

Run a vulnerability security scanner as part of your continuous-integration /continuous-delivery (CI/CD) pipeline

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Your company has a Google Cloud project that uses BigQuery for data warehousing. There are some tables that contain personally identifiable information (PII).
Only the compliance team may access the PII. The other information in the tables must be available to the data science team. You want to minimize cost and the time it takes to assign appropriate access to the tables. What should you do?

A

“Create a dataset for the data science team. Create views (NOT materialized, too expensive) of tables that you want to share, excluding PII.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A few days after JencoMart migrates the user credentials database to Google Cloud Platform and shuts down the old server, the new database server stops responding to SSH connections. It is still serving database requests to the application servers correctly.
What three steps should you take to diagnose the problem? (Choose three.)

A

Take a snapshot of the disk and connect to a new machine to investigate
Check inbound firewall rules for the network the machine is connected to.
Print the Serial Console output for the instance for troubleshooting, activate the interactive console, and investigate.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Mountkirk Games’ gaming servers are not automatically scaling properly. Last month, they rolled out a new feature, which suddenly became very popular. A record number of users are trying to use the service, but many of them are getting 503 errors and very slow response times. What should they investigate first?

A

Verify that the new feature code did not introduce any performance bugs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Mountkirk Games wants to migrate from their current analytics and statistics reporting model to one that meets their technical requirements on Google Cloud Platform.
Which two steps should be part of their migration plan? (Choose two.)

A

Evaluate the impact of migrating their current batch ETL code to Cloud Dataflow.
Write a schema migration plan to denormalize data for better performance in BigQuery.

22
Q

gcloud compute security-policies rules update 500
–security-policy eu-hrl-policy
–expression “evaluatePreconfiguredExpr(‘sourceiplist-fastly’)”
–action “allow”

A

It’s not firewall its load balancer

23
Q

Mountkirk Games wants you to secure the connectivity from the new gaming application platform to Google Cloud. You want to streamline the process and follow
Google-recommended practices. What should you do?

A

Configure Workload Identity and service accounts to be used by the application platform.

24
Q

You start to build a new application that uses a few Cloud Functions for the backend. One use case requires a Cloud Function func_display to invoke another Cloud Function func_query. You want func_query only to accept invocations from func_display. You also want to follow Google’s recommended best practices. What should you do?

A

Require auth and service account.
Make func_query ‘Require authentication.’ Create a unique service account and associate it to func_display. Grant the service account invoker role for func_query. Create an id token in func_display and include the token to the request when invoking func_query.”

25
Q

Your team is gearing up to conduct a load-testing exercise to evaluate the scalability and performance of your primary cloud services, which are hosted on Google Kubernetes Engine (GKE) and utilize Bigtable for data storage. What steps should be included in the load-testing strategy to ensure a comprehensive assessment and dependable outcomes?

A

Create a separate Google Cloud project specifically for executing the load tests.
Ensure that the load tests focus on evaluating the performance of Bigtable under peak traffic conditions.
Implement extensive monitoring and logging within both the load-testing framework and the cloud services being tested.

26
Q

You are the data compliance officer for Mountkirk Games and must protect customers’ personally identifiable information (PII). Mountkirk Games wants to make sure they can generate anonymized usage reports about their new game and delete PII data after a specific period of time. The solution should have minimal cost. You need to ensure compliance while meeting business and technical requirements. What should you do?

A

Archive audit logs in BigQuery, and generate reports using Google Data Studio.

27
Q

Mountkirk Games wants you to make sure their new gaming platform is being operated according to Google best practices. You want to verify that Google-recommended security best practices are being met while also providing the operations teams with the metrics they need. What should you do? (Choose two)

A

Ensure that you aren’t running privileged containers.
Ensure that you are using the native logging mechanisms.

28
Q

The operations manager asks you for a list of recommended practices that she should consider when migrating a J2EE application to the cloud.
Which three practices should you recommend? (Choose three.)

A

Instrument the application with a monitoring tool like Stackdriver Debugger
Select an automation framework to reliably provision the cloud infrastructure
Deploy a continuous integration tool with automated testing in a staging environment

29
Q

A lead engineer wrote a custom tool that deploys virtual machines in the legacy data center. He wants to migrate the custom tool to the new cloud environment.
You want to advocate for the adoption of Google Cloud Deployment Manager.
What are two business risks of migrating to Cloud Deployment Manager? (Choose two.)

A

Cloud Deployment Manager can perm delete
Cloud Deployment Manager only supports automation of Google Cloud resources

30
Q

Your development team has installed a new Linux kernel module on the batch servers in Google Compute Engine (GCE) virtual machines (VMs) to speed up the nightly batch process. Two days after the installation, 50% of the batch servers failed the nightly batch run. You want to collect details on the failure to pass back to the development team.
Which three actions should you take? (Choose three.)

A

Use Stackdriver Logging to search for the module log entries
Use gcloud or Cloud Console to connect to the serial console and observe the logs
Adjust the Google Stackdriver timeline to match the failure time, and observe the batch server metrics

31
Q

You have an application deployed on Google Kubernetes Engine using a Deployment named echo-deployment. The deployment is exposed using a Service called echo-service. You need to perform an update to the application with minimal downtime to the application. What should you do?

A

Use kubectl set image deployment/echo-deployment <new-image></new-image>

32
Q

Your customer wants to capture multiple GBs of aggregate real-time key performance indicators (KPIs) from their game servers running on Google Cloud Platform and monitor the KPIs with low latency. How should they capture the KPIs?

A

Output custom metrics to Stackdriver from the game servers, and create a Dashboard in Stackdriver Monitoring Console to view them

33
Q

Your company pushes batches of sensitive transaction data from its application server VMs to Cloud Pub/Sub for processing and storage. What is the Google- recommended way for your application to authenticate to the required Google Cloud services?

A

Ensure that VM service accounts are granted the appropriate Cloud Pub/Sub IAM roles

34
Q

You want your Google Kubernetes Engine cluster to automatically add or remove nodes based on CPU load. What should you do?

A

“Enable the Cluster Autoscaler from the GCP Console.

35
Q

Your customer runs a web service used by e-commerce sites to offer product recommendations to users. The company has begun experimenting with a machine learning model on Google Cloud Platform to improve the quality of results.
What should the customer do to improve their model’s results over time?

A

Save a history of recommendations and results of the recommendations in BigQuery, to be used as training data.

36
Q

You need to ensure reliability for your application and operations by supporting reliable task scheduling for compute on GCP. Leveraging Google best practices, what should you do?

A

App Engine, pub/sub

37
Q

Mountkirk Games wants you to make sure their new gaming platform is being operated according to Google best practices. You want to verify that Google-recommended security best practices are being met while also providing the operations teams with the metrics they need. What should you do? (Choose two)

A

Ensure that you aren’t running privileged containers.
Ensure that you are using the native logging mechanisms.

38
Q

Mountkirk Games is developing a new multiplayer game with a high likelihood of rapid growth. They need a solution to handle real-time scoring data and publish it on a global leaderboard while also keeping costs low. Which combination of Google Cloud technologies will fulfill all their requirements?

A

Kubernetes Engine, Cloud Pub/Sub, and Firestore

39
Q

An http 503 error is resource constraints.
transient errors like 503 (Service Unavailable) and 429 (Too Many Requests).

A
40
Q

*It’s more effective to simulate realistic conditions without directly using production data.

A
41
Q

*anthos is multi cloud or bigger deployments

A
42
Q

Tools are OAUTH people are SAML

A
43
Q

KPI: page views or checkouts METRIC, not goal
SLI: all calls will execute BLANK percent of the time in under 100ms
SLO: defining the BLANK percentage
SLA: Business contract

A
44
Q

Workload Identity is related to GKE and secure access

A
45
Q

Public Google Access allows you to access Google APIs without an external IP

A
46
Q

Use Cloud Bigtable for time series data, use Cloud Spanner for transactional data, and use BigQuery for historical data queries.

A
47
Q

pub/sub
To sum it up, a producer publishes messages to a topic and a consumer creates a subscription to a topic to receive messages from it.

A
48
Q

VPC’s need a firewall talk to to another vpc
Lower FW rules are run first but it doesn’t keep going once it finds a matching rule
Within a VPC all private IPs can talk unless you deny in the firewall
Every subnet is created for every region in auto mode- not recommended for prod
If you need IPv6 subnets use custom mode only
network tags are used to match rules to machines

A
49
Q

Apigee is bigger & way more expensive for API over cloud endpoints

Labels are for billing
Tags are for permissions

A
50
Q

Monitoring:
For VM’s use ops agent
For GKE use Prometheus

A
51
Q

Shared VPC: connects resources from different projects into a common networking project (in the same org)
Regular VPC: allows for network isolation.
VPC Network Peering: enables internal IP’s between different projects/organizations.

A
52
Q
A

PCA (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions