google associate-cloud-engineer online test

Question 1

You have created an application that is packaged into a Docker image. You want to deploy the Docker image as a workload
on Google Kubernetes Engine. What should you do?

• A. Upload the image to Cloud Storage and create a Kubernetes Service referencing the image.
• B. Upload the image to Cloud Storage and create a Kubernetes Deployment referencing the image.
• C. Upload the image to Container Registry and create a Kubernetes Service referencing the image.
• D. Upload the image to Container Registry and create a Kubernetes Deployment referencing the image.

Answer:

B

Explanation:
Reference: https://cloud.google.com/kubernetes-engine/docs/tutorials/hello-app

Question 2

You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances
are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access
these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?

• A. Create the instance with the default Compute Engine service account. Grant the service account permissions on Cloud Storage.
• B. Create the instance with the default Compute Engine service account Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
• C. Create a new service account and assign this service account to the new instance. Grant the service account permissions on Cloud Storage.
• D. Create a new service account and assign this service account to the new instance. Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.

Answer:

A

Explanation:
Reference: https://cloud.google.com/compute/docs/access/service-accounts

Question 3

You are about to deploy a new Enterprise Resource Planning (ERP) system on Google Cloud. The application holds the full
database in-memory for fast data access, and you need to configure the most appropriate resources on Google Cloud for
this application. What should you do?

• A. Provision preemptible Compute Engine instances.
• B. Provision Compute Engine instances with GPUs attached.
• C. Provision Compute Engine instances with local SSDs attached.
• D. Provision Compute Engine instances with M1 machine type.

Answer:

C

Explanation:
Reference: https://cloud.google.com/compute/docs/disks/local-ssd

Question 4

You are deploying an application to App Engine. You want the number of instances to scale based on request rate. You
need at least 3 unoccupied instances at all times. Which scaling type should you use?

• A. Manual Scaling with 3 instances.
• B. Basic Scaling with min_instances set to 3.
• C. Basic Scaling with max_instances set to 3.
• D. Automatic Scaling with min_idle_instances set to 3.

Answer:

D

Explanation:
Reference: https://cloud.google.com/appengine/docs/standard/python/how-instances-are-managed

Question 5

Your company has workloads running on Compute Engine and on-premises. The Google Cloud Virtual Private Cloud (VPC)
is connected to your WAN over a Virtual Private Network (VPN). You need to deploy a new Compute Engine instance and
ensure that no public Internet traffic can be routed to it. What should you do?

• A. Create the instance without a public IP address.
• B. Create the instance with Private Google Access enabled.
• C. Create a deny-all egress firewall rule on the VPC network.
• D. Create a route on the VPC to route all traffic to the instance over the VPN tunnel.

Answer:

B

Explanation:
Get private access to Google services, such as storage, big data, analytics, or machine learning, without having to give your
service a public IP address. Reference: https://cloud.google.com/vpc

Question 6

The core business of your company is to rent out construction equipment at large scale. All the equipment that is being
rented out has been equipped with multiple sensors that send event information every few seconds. These signals can vary
from engine status, distance traveled, fuel level, and more. Customers are billed based on the consumption monitored by
these sensors. You expect high throughput up to thousands of events per hour per device and need to retrieve
consistent data based on the time of the event. Storing and retrieving individual signals should be atomic. What should you
do?

• A. Create a file in Cloud Storage per device and append new data to that file.
• B. Create a file in Cloud Filestore per device and append new data to that file.
• C. Ingest the data into Datastore. Store data in an entity group based on the device.
• D. Ingest the data into Cloud Bigtable. Create a row key based on the event timestamp.

Answer:

D

Question 7

You need to monitor resources that are distributed over different projects in Google Cloud Platform. You want to consolidate
reporting under the same Stackdriver Monitoring dashboard. What should you do?

• A. Use Shared VPC to connect all projects, and link Stackdriver to one of the projects.
• B. For each project, create a Stackdriver account. In each project, create a service account for that project and grant it the role of Stackdriver Account Editor in all other projects.
• C. Configure a single Stackdriver account, and link all projects to the same account.
• D. Configure a single Stackdriver account for one of the projects. In Stackdriver, create a Group and add the other project names as criteria for that Group.

Answer:

D

Question 8

You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple
zones, using the fewest possible steps. You need to configure re-creation of VMs if they are unresponsive after 3 attempts of
10 seconds each. What should you do?

• A. Create an HTTP load balancer with a backend configuration that references an existing instance group. Set the health check to healthy (HTTP)
• B. Create an HTTP load balancer with a backend configuration that references an existing instance group. Define a balancing mode and set the maximum RPS to 10.
• C. Create a managed instance group. Set the Autohealing health check to healthy (HTTP)
• D. Create a managed instance group. Verify that the autoscaling setting is on.

Answer:

D

Question 9

You have designed a solution on Google Cloud that uses multiple Google Cloud products. Your company has asked you to
estimate the costs of the solution. You need to provide estimates for the monthly total cost. What should you do?

• A. For each Google Cloud product in the solution, review the pricing details on the products pricing page. Use the pricing calculator to total the monthly costs for each Google Cloud product.
• B. For each Google Cloud product in the solution, review the pricing details on the products pricing page. Create a Google Sheet that summarizes the expected monthly costs for each product.
• C. Provision the solution on Google Cloud. Leave the solution provisioned for 1 week. Navigate to the Billing Report page in the Cloud Console. Multiply the 1 week cost to determine the monthly costs.
• D. Provision the solution on Google Cloud. Leave the solution provisioned for 1 week. Use Cloud Monitoring to determine the provisioned and used resource amounts. Multiply the 1 week cost to determine the monthly costs.

Answer:

C

Question 10

You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new
application to the public, using HTTPS on a public IP address. What should you do?

• A. Create a Kubernetes Service of type NodePort for your application, and a Kubernetes Ingress to expose this Service via a Cloud Load Balancer.
• B. Create a Kubernetes Service of type ClusterIP for your application. Configure the public DNS name of your application using the IP of this Service.
• C. Create a Kubernetes Service of type NodePort to expose the application on port 443 of each node of the Kubernetes cluster. Configure the public DNS name of your application with the IP of every node of the cluster to achieve load-balancing.
• D. Create a HAProxy pod in the cluster to load-balance the traffic to all the pods of the application. Forward the public traffic to HAProxy with an iptable rule. Configure the DNS name of your application using the public IP of the node HAProxy is running on.

Answer:

A

Explanation:
Reference: https://cloud.google.com/kubernetes-engine/docs/tutorials/http-balancer