A development manager is building a new application. He asks you to review his requirements and identify what cloud technologies he can use to meet them. The application must:
Be based on open-source technology for cloud portability
Dynamically scale compute capacity based on demand
Support continuous software delivery
Run multiple segregated copies of the same application stack
Deploy application bundles using dynamic templates
Route network traffic to specific services based on URL
Which combination of technologies will meet all of his requirements?
Answer
Google Kubernetes Engine, Jenkins, and Helm
Google Kubernetes Engine and Cloud Load Balancing
Google Kubernetes Engine and Cloud Deployment Manager
Google Kubernetes Engine, Jenkins, and Cloud Load Balancing
Card 42
Question
Your organization has a 3-tier web application deployed in the same network on Google Cloud Platform. Each tier (web, API, and database) scales independently of the others. Network traffic should flow through the web to the API tier and then on to the database tier. Traffic should not flow between the web and the database tier.
How should you configure the network?
Answer
Add each tier to a different subnetwork
Set up software based firewalls on individual VMs
Add tags to each tier and set up routes to allow the desired traffic flow
Add tags to each tier and set up firewall rules to allow the desired traffic flow
Card 43
Question
Your development team has installed a new Linux kernel module on the batch servers in Google Compute Engine (GCE) virtual machines (VMs) to speed up the nightly batch process. Two days after the installation, 50% of the batch servers failed the nightly batch run. You want to collect details on the failure to pass back to the development team.
Which three actions should you take? Choose 3 answers.
Answer
Use Stackdriver Logging to search for the module log entries
Read the debug GCE Activity log using the API or Cloud Console
Identify whether a live migration event of the failed server occurred, using in the activity log
Use gcloud or Cloud Console to connect to the serial console and observe the logs
Adjust the Google Stackdriver timeline to match the failure time, and observe the batch server metrics
Export a debug VM into an image, and run the image on a local server where kernel log messages will be displayed on the native screen
Card 44
Question
Your organization wants to control IAM policies for different departments independently, but centrally.
Which approach should you take?
Answer
Multiple Organizations with multiple Folders
Multiple Organizations, one for each department
A single Organization with Folders for each department
A single Organization with multiple projects, each with a central owner
Card 45
Question
You are designing a mobile chat application. You want to ensure people cannot spoof chat messages, by providing a message were sent by a specific user.
What should you do?
Answer
Tag messages client side with the originating user identifier and the destination user.
Encrypt the message client side using block-based encryption with a shared key.
Use public key infrastructure (PKI) to encrypt the message client side using the originating user's private key.
Use a trusted certificate authority to enable SSL connectivity between the client application and the server.
Card 46
Question
You are analyzing and defining business processes to support your startup’s trial usage of GCP, and you don’t yet know what consumer demand for your product will be. Your manager requires you to minimize GCP service costs and adhere to Google best practices. What should you do?
Answer
Utilize free tier and sustained use discounts. Provision a staff position for service cost management.
Utilize free tier and sustained use discounts. Provide training to the team about service cost management.
Utilize free tier and committed use discounts. Provision a staff position for service cost management.
Utilize free tier and committed use discounts. Provide training to the team about service cost management.
Card 47
Question
You have an outage in your Compute Engine managed instance group: all instance keep restarting after 5 seconds. You have a health check configured, but autoscaling is disabled. Your colleague, who is a Linux expert, offered to look into the issue. You need to make sure that he can access the VMs. What should you do?
Answer
Grant your colleague the IAM role of project Viewer
Perform a rolling restart on the instance group
Disable the health check for the instance group. Add his SSH key to the project-wide SSH keys
Disable autoscaling for the instance group. Add his SSH key to the project-wide SSH Keys
Card 48
Question
Your company is migrating its on-premises data center into the cloud. As part of the migration, you want to integrate Kubernetes Engine for workload orchestration.
Parts of your architecture must also be PCI DSS-compliant. Which of the following is most accurate?
Answer
App Engine is the only compute platform on GCP that is certified for PCI DSS hosting.
Kubernetes Engine cannot be used under PCI DSS because it is considered shared hosting.
Kubernetes Engine and GCP provide the tools you need to build a PCI DSS-compliant environment.
All Google Cloud services are usable because Google Cloud Platform is certified PCI-compliant.
Card 49
Question
Google Cloud Platform resources are managed hierarchically using organization, folders, and projects. When Cloud Identity and Access Management (IAM) policies exist at these different levels, what is the effective policy at a particular node of the hierarchy?
Answer
The effective policy is determined only by the policy set at the node
The effective policy is the policy set at the node and restricted by the policies of its ancestors
The effective policy is the union of the policy set at the node and policies inherited from its ancestors
The effective policy is the intersection of the policy set at the node and policies inherited from its ancestors
Card 50
Question
You have an application that will run on Compute Engine. You need to design an architecture that takes into account a disaster recovery plan that requires your application to fail over to another region in case of a regional outage. What should you do?
Answer
Deploy the application on two Compute Engine instances in the same project but in a different region. Use the first instance to serve traffic, and use the HTTP load balancing service to fail over to the standby instance in case of a disaster.
Deploy the application on a Compute Engine instance. Use the instance to serve traffic, and use the HTTP load balancing service to fail over to an instance on your premises in case of a disaster.
Deploy the application on two Compute Engine instance groups, each in the same project but in a different region. Use the first instance group to serve traffic, and use the HTTP load balancing service to fail over to the standby instance group in case of a disaster.
Deploy the application on two Compute Engine instance groups, each in separate project and a different region. Use the first instance group to serve traffic, and use the HTTP load balancing service to fail over to the standby instance in case of a disaster.
Card 51
Question
You are deploying an application on App Engine that needs to integrate with an on-premises database. For security purposes, your on-premises database must not be accessible through the public Internet. What should you do?
Answer
Deploy your application on App Engine standard environment and use Cloud VPN to limit access to the on-premises database.
Deploy your application on App Engine standard environment and use App Engine firewall rules to limit access to the open on-premises database.
Deploy your application on App Engine flexible environment and use App Engine firewall rules to limit access to the on-premises database.
Deploy your application on App Engine flexible environment and use Cloud VPN to limit access to the on-premises database.
Card 52
Question
You need to set up Microsoft SQL Server on GCP. Management requires that there’s no downtime in case of a data center outage in any of the zones within a GCP region. What should you do?
Answer
Configure a Cloud SQL instance with high availability enabled.
Configure a Cloud Spanner instance with a regional instance configuration.
Set up SQL Server Always On Availability Groups using Windows Failover Clustering. Place nodes in different zones.
Set up SQL Server on Compute Engine, using Always On Availability Groups using Windows Failover Clustering. Place nodes in different subnets.
Card 53
Question
You are designing an application for use only during business hours. For the minimum viable product release, you’d like to use a managed product that automatically “scales to zero” so you don’t incur costs when there is no activity. Which primary compute resource should you choose?
Answer
Cloud Functions
Compute Engine
Kubernetes Engine
AppEngine flexible environment
Card 54
Question
Your customer wants to capture multiple GBs of aggregate real-time key performance indicators (KPIs) from their game servers running on Google Cloud Platform and monitor the KPIs with low latency. How should they capture the KPIs?
Answer
Store time-series data from the game servers in Google Bigtable, and view it using Google Data Studio.
Output custom metrics to Stackdriver from the game servers, and create a Dashboard in Stackdriver Monitoring Console to view them.
Schedule BigQuery load jobs to ingest analytics files uploaded to Cloud Storage every ten minutes, and visualize the results in Google Data Studio.
Insert the KPIs into Cloud Datastore entities, and run ad hoc analysis and visualizations of them in Cloud Datalab.
Card 55
Question
Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?
Answer
Your company wants to start using Google Cloud resources but wants to retain their on-premises Active Directory domain controller for identity management. What should you do?
Use Cloud Identity-Aware Proxy configured to use the on-premises Active Directory domain controller as an identity provider.
Use Google Cloud Directory Sync to synchronize Active Directory usernames with cloud identities and configure SAML SSO.
Use Compute Engine to create an Active Directory (AD) domain controller that is a replica of the on-premises AD domain controller using Google Cloud Directory Sync.
Card 56
Question
For this question, refer to the Mountkirk Games case study. You need to analyze and define the technical architecture for the compute workloads for your company, Mountkirk Games. Considering the Mountkirk Games business and technical requirements, what should you do?
Answer
Create network load balancers. Use preemptible Compute Engine instances
Create network load balancers. Use non-preemptible Compute Engine instances
Create a global load balancer with managed instance groups and autoscaling policies. Use preemptible Compute Engine instances
Create a global load balancer with managed instance groups and autoscaling policies. Use non-preemptible Compute Engine instances
Card 57
Question
Your company's test suite is a custom C++ application that runs tests throughout each day on Linux virtual machines. The full test suite takes several hours to complete, running on a limited number of on-premises servers reserved for testing. Your company wants to move the testing infrastructure to the cloud, to reduce the amount of time it takes to fully test a change to the system, while changing the tests as little as possible.
Which cloud infrastructure should you recommend?
Answer
Google Compute Engine unmanaged instance groups and Network Load Balancer
Google Compute Engine managed instance groups with auto-scaling
Google Cloud Dataproc to run Apache Hadoop jobs to process each test
Google App Engine with Google StackDriver for logging
Card 58
Question
For this question, refer to the Mountkirk Games case study. You need to analyze and define the technical architecture for the database workloads for your company, Mountkirk Games. Considering the business and technical requirements, what should you do?
Answer
Use Cloud SQL to replace MySQL, and use Cloud Spanner for historical data queries.
Use Cloud SQL for time series data, and use Cloud Bigtable for historical data queries.
Use Cloud Bigtable to replace MySQL, and use BigQuery for historical data queries.
Use Cloud Bigtable for time series data, use Cloud Spanner for transactional data, and use BigQuery for historical data queries.
Card 59
Question
A lead software engineer tells you that his new application design uses websockets and HTTP sessions that are not distributed across the web servers. You want to help him ensure his application will run properly on Google Cloud Platform.
What should you do?
Answer
Help the engineer to convert his websocket code to use HTTP streaming
Meet with the cloud operations team and the engineer to discuss load balancer options
Review the encryption requirements for websocket connections with the security team
Help the engineer redesign the application to use a distributed user session service that does not rely on websockets and HTTP sessions.
Card 60
Question
The application reliability team at your company this added a debug feature to their backend service to send all server events to Google Cloud Storage for eventual analysis. The event records are at least 50 KB and at most 15 MB and are expected to peak at 3,000 events per second. You want to minimize data loss.
Which process should you implement?
Answer
"¢ Append metadata to file body "¢ Compress individual files "¢ Name files with serverName "" Timestamp "¢ Create a new bucket if bucket is older than 1 hour and save individual files to the new bucket. Otherwise, save files to existing bucket.
"¢ Batch every 10,000 events with a single manifest file for metadata "¢ Compress event files and manifest file into a single archive file "¢ Name files using serverName "" EventSequence "¢ Create a new bucket if bucket is older than 1 day and save the single archive file to the new bucket. Otherwise, save the single archive file to existing bucket.
"¢ Compress individual files "¢ Name files with serverName "" EventSequence "¢ Save files to one bucket "¢ Set custom metadata headers for each object after saving
"¢ Append metadata to file body "¢ Compress individual files "¢ Name files with a random prefix pattern "¢ Save files to one bucket
How to use this set
Read the preview and check whether the content and answers suit your learning goal. You can add the public set to your sets to study it. Your account shows the available actions.