Google ASSOCIATE-CLOUD-ENGINEER Online Practice Questions and Exam Preparation

Google ASSOCIATE-CLOUD-ENGINEER Online Questions & Answers

• Question 421:

  The development team needs a regional MySQL database with point-in-time recovery for a new proof- of-concept application. What's the most inexpensive way to enable point-in-time recovery?

  A. Replicate to a Cloud Spanner database.
  B. Create a read replica in the same region.
  C. Enable binary logging.
  D. Create hourly back-ups.
  C. Enable binary logging.

  ---

  Explanation

• Question 422:

  You have a Linux VM that must connect to Cloud SQL. You created a service account with the appropriate access rights. You want to make sure that the VM uses this service account instead of the default Compute Engine service account. What should you do?

  A. When creating the VM via the web console, specify the service account under the `Identity and API Access' section.
  B. Download a JSON Private Key for the service account. On the Project Metadata, add that JSON as the value for the key compute-engine-service-account.
  C. Download a JSON Private Key for the service account. On the Custom Metadata of the VM, add that JSON as the value for the key compute-engine-service-account.
  D. Download a JSON Private Key for the service account. After creating the VM, ssh into the VM and save the JSON under ~/.gcloud/compute-engine-service-account.json.
  A. When creating the VM via the web console, specify the service account under the `Identity and API Access' section.

  ---

  Explanation

  https://cloud.google.com/compute/docs/access/create-enable-service-accounts-for-instances

  Changing the service account and access scopes for an instance If you want to run the VM as a different identity, or you determine that the instance needs a different set of scopes to call the required APIs, you can change the service account and the access scopes of an existing instance. For example, you can change access scopes to grant access to a new API, or change an instance so that it runs as a service account that you created, instead of the Compute Engine default service account. However, Google recommends that you use the fine-grained IAM policies instead of relying on access scopes to control resource access for the service account.

  To change an instance's service account and access scopes, the instance must be temporarily stopped. To stop your instance, read the documentation for Stopping an instance. After changing the service account or access scopes, remember to restart the instance. Use one of the following methods to the change service account or access scopes of the stopped instance.

• Question 423:

  Your finance team is working with the engineering team to try and determine your spending for each service by day and month across all projects used by the billing account. What is the easiest and most flexible way to aggregate and analyze the data?

  A. Export the data for the billing account(s) involved to BigQuery; then use BigQuery to analyze the service data for the desired projects, by day and month.
  B. Export the data for the billing account(s) involved to a JSON File; use a Cloud Function to listen for a new file in the Storage bucket; code the function to analyze the service data for the desired projects, by day and month.
  C. Export the data for the billing account(s) to File, import the files into a SQL database; then use BigQuery to analyze the service data for the desired projects, by day and month.
  D. Use the built-in reports which already show this data;
  A. Export the data for the billing account(s) involved to BigQuery; then use BigQuery to analyze the service data for the desired projects, by day and month.

  ---

  Explanation

• Question 424:

  You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices. What should you do?

  A. Add the support team group to the roles/monitoring.viewer role
  B. Add the support team group to the roles/spanner.databaseUser role.
  C. Add the support team group to the roles/spanner.databaseReader role.
  D. Add the support team group to the roles/stackdriver.accounts.viewer role.
  A. Add the support team group to the roles/monitoring.viewer role

  ---

  Explanation

  A is correct, the team need to monitor the environment not read the data.

• Question 425:

  Your team has developed a stateless application which requires it to be run directly on virtual machines. The application is expected to receive a fluctuating amount of traffic and needs to scale automatically. You need to deploy the application. What should you do?

  A. Deploy the application on a managed instance group and configure autoscaling.
  B. Deploy the application on a Kubernetes Engine cluster and configure node pool autoscaling.
  C. Deploy the application on Cloud Functions and configure the maximum number instances.
  D. Deploy the application on Cloud Run and configure autoscaling.
  A. Deploy the application on a managed instance group and configure autoscaling.

  ---

  Explanation

  A managed instance group (MIG) is a group of identical virtual machines (VMs) that you can manage as a single entity. You can use a MIG to deploy and maintain a stateless application that runs directly on VMs. A MIG can automatically scale the number of VMs based on the load or a schedule. A MIG can also automatically heal the VMs if they become unhealthy or unavailable. A MIG is suitable for applications that need to run on VMs rather than containers or serverless platforms. B is incorrect because Kubernetes Engine is a managed service for running containerized applications on a cluster of nodes. It is not necessary to use Kubernetes Engine if the application does not use containers and can run directly on VMs. C is incorrect because Cloud Functions is a serverless platform for running event-driven code in response to triggers. It is not suitable for applications that need to run continuously and handle HTTP requests. D is incorrect because Cloud Run is a serverless platform for running stateless containerized applications. It is not suitable for applications that do not use containers and can run directly on VMs.

  References: Managed instance groups documentation Choosing a compute option for Google Cloud

• Question 426:

  You need to host an application on a Compute Engine instance in a project shared with other teams. You want to prevent the other teams from accidentally causing downtime on that application. Which feature should you use?

  A. Use a Shielded VM.
  B. Use a Preemptible VM.
  C. Use a sole-tenant node.
  D. Enable deletion protection on the instance.
  D. Enable deletion protection on the instance.

  ---

  Explanation

  Preventing Accidental VM Deletion

  This document describes how to protect specific VM instances from deletion by setting the deletionProtection property on an Instance resource. To learn more about VM instances, read the Instances documentation.

  As part of your workload, there might be certain VM instances that are critical to running your application or services, such as an instance running a SQL server, a server used as a license manager, and so on. These VM instances might need to stay running indefinitely so you need a way to protect these VMs from being deleted.

  By setting the deletionProtection flag, a VM instance can be protected from accidental deletion. If a user attempts to delete a VM instance for which you have set the deletionProtection flag, the request fails. Only a user that has been granted a role with compute.instances.create permission can reset the flag to allow the resource to be deleted.

  https://cloud.google.com/compute/docs/instances/preventing-accidental-vm-deletion

• Question 427:

  A team of data scientists infrequently needs to use a Google Kubernetes Engine (GKE) cluster that you manage. They require GPUs for some long-running, non-restartable jobs. You want to minimize cost. What should you do?

  A. Enable node auto-provisioning on the GKE cluster.
  B. Create a VerticalPodAutscaler for those workloads.
  C. Create a node pool with preemptible VMs and GPUs attached to those VMs.
  D. Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.
  A. Enable node auto-provisioning on the GKE cluster.

  ---

  Explanation

  Incorrect options are

  B. VerticalPodAutscaler scales PODS based on the app you deploy.

  For handle infrequently GPU access, you need infrequently GPU nodes

  VerticalAutscaler Pod deployed on a non GPU node it useless,

  [We cant have the node always have GPU for infrequent requests]

  C. Preemptible VMs cant last long

  D. For infrequent access, you don't want to have a permanent homogenous cluster.

  The correct option is "A"

  auto-provisioning = Attaches and deletes node pools to cluster based on the requirements.

  Hence creating a GPU node pool, and auto-scaling would be better https://cloud.google.com/kubernetes-engine/docs/how-to/node-auto-provisioning