ForMe1

Question 1

You work in a small company where everyone should be able to view all resources of a specific project. You want to grant them access following Google’s recommended practices. What should you do?

Answer 1

Create a new Google Group and add all users to the group. Use “gcloud projects add-iam-policy-binding” with the Project Viewer role and Group email address.

Question 2

Your project manager accidentally created an auto mode VPC. He is now asking you to convert the same to custom mode VPC as the applications are already deployed and they rely on static internal IP addresses. Is it possible?

Answer 2

Auto mode VPC can be converted to manual but the vice versa is not possible.

Question 3

A health care company that provides medical service to the users want to track their network forensics, real-time security analysis and optimize the expense. The manager would like to track the network sent from and received by VM instances. What do you suggest they do?

Answer 3

VPC Flow Logs

Flow Logs are used to track network related findings.

Question 4

You have been assigned to a new health application project where the backend instances are deployed using Managed Instance Groups. There are 4 instances running. The MIG is not set to automatically scale and you are asked to resize a group to handle an expected increase in traffic. Which of the following statements about MIG is incorrect?

Answer 4

When updating a MIG, no more than 500 instances can be specified in a single request.

When updating a MIG, up to 1000 instances can be specified in a single request.

?????????

Question 5

What is the gcloud command to create a cluster named ch09-cluster-10 with four nodes?

Answer 5

gcloud container clusters create ch09-cluster-10 –num-nodes=4

Question 6

A development team works with two Cloud Functions using node.js code. Each function corresponds to environments for development and production. The code is same except for the Cloud SQL database values used in each function. Team wants to maintain code in a clean and reusable fashion and decides to pass the database value during function execution. Which feature will allow you to do this?

Answer 6

Environment Variables

Environment variables for cloud functions enable you to dynamically pass settings to your function code and libraries, without making changes to your code

https://cloud.google.com/functions/docs/env-var

Question 7

What is the correct command to create an IAM user using Google Cloud CLI?

Answer 7

The gcloud command to create an IAM user is gcloud projects add-iam-policy-binding whizlabs-prj –member “user:bob@xyz.com” –role “roles/editor”.

Question 8

A developer has asked you to create a single nginx server for dev environment. Which service would allow you to launch VM using predefined images?

Answer 8

Marketplace

Marketplace provides you with pre-built images which can be launched with just a few clicks without doing any configuration.

Question 10

Which of the following export options are available with Google Cloud Billing?

Answer 10

BigQuery and File

Billing export at the time of writing supports only BigQuery and File export

Question 11

You are working for a service company that has an automobile client. The client has developed an application for internal use with Erlang and has approached your company to help him to ease the application deployment process on Google Cloud. The company does not have highly trained people so, wants you to deploy the application in such a way that post-deployment, they will be able to manage it without worrying about the infrastructure. Which of the following service would you prefer?

Answer 11

Using App Engine Flexible environment, you can deploy an application written in any language without managing instances, load balancers, etc. manually.

Question 12

Using the principle of least privilege, your colleague Bob needs to be able to create new instances on Compute Engine in project ‘Project A’. How should you give him access without giving more permissions than is necessary?

Answer 12

Give Bob Compute Engine Instance Admin Role for Project A - The Compute Engine Instance Admin role only gives access to create/edit compute engine resources such as instances, disks, and snapshots.

Question 13

You have an application server running on Compute Engine in the europe-west1-d zone. You need to ensure high availability and replicate the server to the europe-west2-c zone using the fewest steps possible. What should you

Answer 13

Create a snapshot from the disk.

Create a disk from the snapshot in the europe-west2-c zone.

Create a new VM with that disk.

This makes sure the VM gets replicated in the new zone.

Question 14

Which command will let you enable Google Compute service using gcloud CLI?

Answer 14

gcloud services enable compute

Question 15

Your company has purchased a threat detection service from a third party and have asked you to upload all network logs to the application. Which of the following service will meet your requirements?

Answer 15

Flow logs capture each and every packet flowing within your network. It will record details like source IP, destination IP, source port, destination port, timestamp, etc.

Question 16

You have a Kubernetes cluster with 1 node-pool. The cluster receives a lot of traffic and needs to grow. You decide to add a node. What should you do?

Answer 16

Use “gcloud container clusters resize” with the desired number of nodes.

This resizes the cluster to the desired number of nodes

Question 17

Your team has deployed a few windows web servers on a custom VPC network and the same is running properly. After a few hours of the app suddenly crashes, developers are trying to remote access web servers, but are failing to do so. While troubleshooting the issue you realize that the firewall rule is missing. Which command will help you solve the problem?

Answer 17

The correct command to allow developers to remote access windows is:

gcloud compute firewall-rules create “remote-access” –network “whizlab-network” –allow tcp:3389.

Question 18

You are trying to fetch metadata of a VM using “curl metadata.google.internal/computeMetadata/v1/” command but are constantly receiving 403 Forbidden. What could be the possible reason?

Answer 18

While querying metadata of an instance you must provide header “Metadata-Flavor: Google”. This header indicates that the request was sent with the intention of retrieving metadata values, rather than unintentionally from an insecure source, and allows the metadata server to return the data you requested. If you do not provide this header, the metadata server denies your request.

Question 19

In VPC, which firewall rules are created by default while creating an automatic default VPC?

Answer 19

Allow SSH, RDP, ICMP, and internal traffic

Question 20

One of your team members had accidentally included service account private JSON key while pushing code to GitHub. What steps should you immediately perform?

Answer 20

Private keys are meant to be kept safe and if they are uploaded to repositories, you must immediately delete them from the source and repository as well.

Question 21

You have been hired as a contractor by one of the travel technology company who is planning to containerize their existing applications in such a way that they can perform a lift and shift very easily in future if they plan to move away from Google Cloud. Which service will best suit this case?

Answer 21

Kubernetes Engine

Kubernetes is an open-source solution supported by major cloud platforms and will be very easy for company to move out at later stage if required because they can use the same config files with very minor changes.

Question 22

Your client wants to develop a new cost effective web application that runs on serverless platform using Cloud Function, Cloud Storage, Pub/Sub and Cloud CDN. The expected data would be 20 GB. Which of the following database would be the most suitable schemaless option to support the serverless functionality?

Answer 22

Cloud Firestore

Cloud Firestore is a fast, fully managed, serverless, cloud-native NoSQL document database that simplifies storing, syncing, and querying data for your mobile, web, and IoT apps at global scale

Question 23

You have recently joined a startup that is migrating its infrastructure from AWS to Google Cloud. A junior has been assigned the task of migrating one of their web servers with Amazon Linux OS from AWS to GCP in a public subnet of custom VPC. He is able to migrate the instance successfully, but not able to get SSH access of migrated instance. What are the possible steps to look for? (Multiple Answer)

Answer 23

1-Check if he has added SSH key to the instance while launching phase. 2-Make sure the firewall is attached to the instance with tcp port 22 open. SSH works on TCP port 22 and hence that has to be allowed at firewall level along with public SSH key configured on VM

Question 24

You need to allow traffic from specific virtual machines in ‘subnet-a’ network access to machines in ‘subnet-b’ without giving the entirety of subnet-a access. How can you accomplish this?

Answer 24

Create a firewall rule to allow traffic from resources with specific network tags, then assign the machines in subnet-a the same tags.

Network tags allow more granular access based on individually tagged instances - Instances by target tags: The firewall rule is applicable only to VMs if they have a matching network tag.

Question 25

You have set a firewall rule that will permit inbound connections to a VM instance named whizserver-2. You want to apply this rule only if there is not another rule that would deny that traffic. What priority would you give to this rule?

Answer 25

65535 is the largest number that is allowed in the range of value for priorities.

Question 26

You have a system generated log files required to be later uploaded to Google Storage in the data lake. Since the data is only accessed couple of times in a year by the development team for debugging and log analysis. You are looking for a cheaper storage option for log files than the standard class. Which of the following is suitable?

Answer 26

Cloud Storage Coldline

Question 27

You want your application hosted on a VM to fetch metadata of that instance. Which command will help you to fetch it?

Answer 27

curl metadata.google.internal/computeMetadata/v1/

Question 28

Which of the following command could be used to change the storage class of an object in Cloud Storage?

Answer 28

gsutil rewrite -s [STORAGE\_CLASS] gs://Reports-PDF/[OBJECT\_NAME] The gsutil rewrite command rewrites cloud objects, applying the specified transformations to them. The transformation(s) are atomic and applied based on the input transformation flags (-s). Object metadata values are preserved unless altered by a transformation.

Question 29

Your customer is moving their corporate applications to Google Cloud Platform. The security team wants detailed visibility of all projects in the organization. You provision the Google Cloud Resource Manager and set up yourself as the org admin. Which Google Cloud Identity and Access Management (Cloud IAM) roles should you give to the security team?

Answer 29

Org viewer, project viewer Gives the security team read only access to everything your company produces, anything else gives them the ability to, accidentally or otherwise, change things, a violation to the principle of least privilege.

Question 30

Engineering team is building an application which routes request on TCP layer. They need a load balancer with support of SSL termination on load balancer. Which of the following is the best available option?

Answer 30

SSL Proxy Load Balancer SSL Proxy is a Layer 3 load balancer with support of SSL termination

Question 31

A GKE cluster was created with 4 nodes initially and after looking at the few months of monitoring report you realized that cluster is underutilized. You plan to reduce the number of nodes to 3 to save the cost. Which gcloud command will help you to do that?

Answer 31

The right way to update the number of nodes within a GKE cluster is via gcloud container clusters resize whizlabs-cluster --num-nodes=3

Question 32

Among the list of permissions attached below, which of the following permissions are required to manage SSH keys on the project while setting project-wide metadata to access the instance if the OS Login is not working? Select 2.

Answer 32

The following 2 permissions are required on the project if setting project-wide metadata: compute. project.setCommonInstanceMetadata iam. serviceAccounts.actAs

Question 33

You are a Google Cloud Engineer and assigned to set up a project for the team of four members. You need to grant only general permissions for all the resources of the project. You decided to grant a primitive role to each person for different levels of access on the basis of their responsibilities in the project. What is not considered as a primitive role in the Google Cloud Platform console?

Answer 33

Publisher is not a primitive role in Google Cloud Platform, but a predefined role.

Question 34

Your client has prepared a new company policy in which each developer must sign a Contributor License Agreement (CLA) before code changes are committed to any version control repository. You have been asked to check each commit in a repository that includes the policy and your manager has also provided you with node.js code. Which of the following services can help you implement this solution?

Answer 34

Cloud Function Cloud Function can be used to retrieve commits, analyze code, committers and perform creative tasks such as checking a CLA.

Question 35

You are managing the GCP Account of a client, the client raises a request to attach 9 local SSDs and launch a VM instance in us-east1 Region, as a Cloud Architect what would be your response to the above request?

Answer 35

Each local SSD is 375 GB in size, but you can attach up to 24 local SSD devices for 9 TB of total local SSD storage space per instance. If a resource is not available, you won’t be able to create new resources of that type, even if you still have remaining quota in your region or project. ## Footnote Read more about it here: https://cloud.google.com/compute/docs/disks/local-ssd https://cloud.google.com/compute/quotas

Question 36

You need to deploy an update to an application in Google App Engine. The update is risky, but it can only be tested in a live environment. What is the best way to introduce the update to minimize risk?

Answer 36

Deploy a new version of the application but use traffic splitting to only direct a small number of users to the new version. Deploying a new version without assigning it as the default version will not create downtime for the application. Using traffic splitting allows for easily redirecting a small amount of traffic to the new version and can also be quickly reverted without application downtime

Question 37

Your company has an application that is deployed using serverless architecture by making use of Cloud Function as backend code, Pub/Sub, Endpoints and serve the static content via Cloud Storage. Your application is used heavily and you were informed about an issue with respect to the Cloud Function. You realised that the issue is because of invocation limit per second. What is the default limit set by GCP to invoke a function per second?

Answer 37

The default invocation limit set by GCP is ## Footnote **1000 per seconds**

Question 38

As per your manager’s instruction, you created a custom VPC with a subnet mask of 24 which provides 256 IP addresses but are only able to use 252 addresses out of it. You manager is trying to figure out what’s going wrong and approaches you for the answer. What will you answer to your manager?

Answer 38

GCP reserves four IP addresses in each primary subnet range, because of which the usable IP count is 252.

Question 39

One of your clients has asked you to create an SFTP server on Google Cloud. Which storage service of Google Cloud will be the most reliable and durable option?

Answer 39

For file storage purpose, **Filestore** is the best option. Cloud Filestore is a managed file storage service for applications that require a filesystem interface and a shared filesystem for data. Filestore gives users a simple, native experience for standing up managed Network Attached Storage (NAS) with their Google Compute Engine and Kubernetes Engine instances.

Question 40

You have an on-premise MySQL database that you have been asked to move to Google Cloud. Users should run SQL queries to fetch data from the database. Your solution should be cost-effective and allow increasing read capacities in the future. Which of the following Google Cloud product is the best for this scenario?

Answer 40

Cloud SQL Cloud SQL is a fully managed database service that makes it easy to set up, maintain, manage, and administer your relational PostgreSQL, MySQL, and SQL Server databases in the cloud.

Question 41

You deployed 10 micro services using Google Kubernetes Engine. The command kubectl run deployed the micro services in different pods, 2 week later your manager asked you to delete the pods as the services were no longer needed. Which of the following options is the best way to delete the pods?

Answer 41

kubectl delete pod The best way is to delete the deployment is deleting the pod

Question 42

Being a Senior Cloud Engineer of the company, you are asked to launch a managed MySQL DB using custom VPC with network range of 172.17.0.0/16 on Google Cloud keeping security at utmost priority allowing team members to access it only over private channel. You completed the setup with all the requirements, but developers are unable to access DB over the private network via application hosted on VM. What can be the reason?

Answer 42

You did not whitelist 172.17.0.0/16 in the firewall.

Question 43

Your team has deployed a GKE cluster having 3 nodes for High Availability. The cluster was tested multiple times before moving to production, but it suddenly stopped working after deploying it to production environment. A team member approached you that he will need shell access to the container for a while to resolve the issue. Which command will give him access to the container?

Answer 43

kubectl exec -i -t whizlabs-web-server -- /bin/bash

Question 44

ASM Info has deployed an application using Google App Engine flexible environment and you have been asked to ssh the VM instance in flexible environment, update the app configuration and if required, enable and disable the App Engine application, which of the following predefined role has access to perform these tasks?

Answer 44

App Engine Admin As per google docs, App Engine Admin has access to perform these tasks

Question 45

When working on billing dashboard, which of the following option would lead you to cost details for a specific invoice month? Report Cost Breakdown Cost Table Billing Export

Answer 45

Cost Table The cost table gives a detailed tabular view of monthly costs for a given invoice

Question 46

You have created a Kubernetes engine cluster named 'mycluster'. You've realized that you need to change the machine type for the cluster from n1-standard-1 to n1-standard-4. What is the command to make this change?

Answer 46

You must create a new node pool in the same cluster and migrate the workload to the new pool. You cannot change the machine type for an individual node pool after creation. You need to create a new pool and migrate your workload over. Here are the steps for “Migrating workloads to different machine types”

Question 47

A system is expected to receive over 15,000 content delivery logs every minute from different web & mobile apps. Logs are received in JSON format. Due to logs being generated by different apps, each developed by a different team, logs do not have a fixed structure and may hold different attributes. Which of the following is a recommended storage option?

Answer 47

Cloud BigTable is a petabyte-scale, fully managed NoSQL database service for large analytical and operational workloads. It provides flexible schema options.

Question 48

Your engineering team has developed an application which will be deployed using GKE. The application needs a monitoring agent running on each node without fail and any change in the number of nodes should also update the count of the monitoring agent. Which API resource would you use to achieve the desired result?

Answer 48

**DaemonSet** is responsible for making sure that one pod is always running on each node and scales automatically depending on the count of nodes.

Question 49

Your client wants to migrate an application to Google Cloud which has 15 TB of relational data. The database is growing rapidly by 10 GB everyday. In addition, to support the traffic, at least 10 read replicas are required. Which of the following service would you meet the requirements?

Answer 49

Cloud Spanner Cloud Spanner is globally scalable, fully managed, enterprise relational database with automatic replication.

Question 50

Your company’s data center has a CIDR of 10.20.0.0/10 and your remote office has 172.50.0.0/16. You have been asked to plan a migration of the workloads from your company’s data center to GCP. Which of the following CIDR range would you select for your VPC in GCP?

Answer 50

172.40.4.0/18 ## Footnote The company’s data center CIDR 10.20.0.0/10 will have the following IP range: 10. 0.0.1 - 10.63.255.254 https: //cloud.google.com/vpc/docs/configure-alias-ip-ranges

Question 51

Your company has decided to build an in-house application for payroll processing, and you have been assigned task to create a VM, Cloud SQL DB and bucket for the same. While testing the application, developers found that they couldn’t upload files to bucket. How would you fix it?

Answer 51

Create a custom service account with write permission for Storage service and attach it to instance. -OR- While launching the instance under Identity and API access section stick to default service account, click on “Set access for API” and select either Write Only or Read Write scope for your instance.

Question 52

Someone from a different team has approached you that he is working on a web application hosted on Google Cloud VM which needs view access to Google Cloud Storage service. Which of the following is the best approach?

Answer 52

Each VM has a default service account attached which gives VM read access to Storage service

Question 53

A bug has been identified within your Python application which is hosted using App Engine and you are about to rollout a new version of the application to resolve the bug, but do not want the traffic to automatically shift to new version just to make sure the new version does not break anything. How would you achieve it?

Answer 53

Using --no-promote flag while deploying new version of the app will not automatically send traffic to new version.

Question 54

You company has uploaded some business critical documents to Cloud Storage and your project manager wants you to restrict access to the objects by using ACLs. Which of the following permission would allow you to update the object ACLs?

Answer 54

storage.objects.update As per google docs, storage.objects.setIamPolicy allows user to update object ACL

Question 55

Your application servers are deployed in private subnet and you connect to an application instance using a bastion host, you connect to the bastion host using Console Shell and then ssh to the respective application instance. Unfortunately, Cloud Shell is taking a lot of time to respond and you manager wants you to ssh to the instance to fix an application specific configuration. What command would you use to SSH into the server from public end?

Answer 55

gcloud compute ssh username@bastion-host The correct syntax is gcloud compute ssh + [USERNAME]+@[SERVERNAME]. From public end, you can only connect to bastion host, hence you need to connect to bastion host first and then connect to application instance.

Question 56

You are launching VMs for your company’s internal application via CLI and you are not able to recollect one of the flags. Using which command you can help yourself?

Answer 56

The correct command to get help on any command is **gcloud help compute instances create**.

Question 57

What does the CIDR 10.0.2.0/26 correspond to?

Answer 57

10.0.2.0 - 10.0.2.63 /26 means 64 IPs (=2^(32-26) = 2^6), means only the last digit can change https://cloud.google.com/vpc/docs/vpc

Question 58

Your teammate launched 3 instances using gcloud compute instances create command with all the required flags. After few mins, you checked the console and found 0 instances in the GCE virtual machine section. How would you identify the project against which the command executed?

Answer 58

gcloud config list ## Footnote This command would list the properties for the currently active configurations.

Question 59

You created an update for your application on App Engine. You want to deploy the update without impacting your users. You want to be able to roll back as quickly as possible if it fails. What should you do?

Answer 59

Deploy the update as a new version. Migrate traffic from the current version to the new version. Because this makes sure there is no downtime and you can roll back the fastest.

Question 60

You created a VPC with a CIDR block of 10.40.0.0/16 with 2 subnets of CIDR range 10.40.1.0/24 and 10.40.2.0/24. What would be the default routes within this virtual private connection having the broadest CIDR range?

Answer 60

0.0.0.0/0 The system generated default route is 0.0.0.0/0 as it is the broadest possible range

Question 61

You are working for a fast growing startup which has user base in US and Europe. Until now the company had all servers in Oregon region and has now decided to launch a replica of the entire infrastructure in EU region as well. You started migration process with the least used server by creating snapshot of its disk and moving it to London region. Once the snapshot was copied you launched a fresh VM using the snapshot but discovered that few of the files were corrupted. What can be the reason?

Answer 61

Snapshot was taken on a running VM. It is never recommended by Google to create a snapshot of running because this might corrupt data. You must always stop the instance and take a snapshot.

Question 62

Your inventory application has 2 backend api servers launched using Auto Scaling Groups, you have been asked to load balance UDP, TCP and SSL traffic on ports that are not supported by the TCP proxy and SSL proxy load balancer. Which of the following Load Balancer would you use?

Answer 62

Network Load Balancer You can use Network Load Balancing to load balance UDP, TCP, and SSL traffic on ports that are not supported by the TCP proxy and SSL proxy load balancers.

Question 63

You created an application for a large hospital which stores around 1GB of files every day on GCS. Most of these files are accessed very rarely after six months from the day of the first upload but are important and cannot be deleted. Which storage class would you prefer to save money after 6 months?

Answer 63

Coldline Coldline is the ideal place to store the type of data which is accessed very rarely. It is also the cheapest option for storage.

Question 64

Which of the following IP address would you specify to define a CIDR range that will apply to all the destination addresses?

Answer 64

0.0.0.0/0

Question 65

A cloud engineer wants to create a VM named whiz-server-1 with four CPUs. Which of the following commands would he use to create the VM whiz-server-1?

Answer 65

gcloud compute instances create --machine-type=n1-standard-4 whiz-server-1

Question 66

There are 5 VPC networks in your staging project created for 5 different applications. Each network has its own CIDR range and firewall rules. You are asked to list the firewall rules of network 3 to perform an update. Select the appropriate response.

Answer 66

gcloud compute firewall-rules list --filter network=network 3 The firewall-rules are defined under VPC but when using gcloud, they can only be accessed by calling compute api and this the following command lists the firewall-rules for the given network.

Question 67

You have 100TB of non-relational data and want to run analytics on it to see previous year net sales. Which tool suits best to your requirement?

Answer 67

BigTable BigTable is a managed NoSQL DB service designed for handling and processing large amounts of data.

Question 68

Your client hosts a static website on Cloud Storage written in HTML, CSS, JavaScript. The site targets users in North America, the usage of website has grown worldwide and hundreds of thousands of visitors access it monthly. Visitors from different parts of the world are experiencing slow performance due to latency while users in the United States experience normal response times. What service can mitigate this issue?

Answer 68

Cloud CDN Google Cloud CDN leverages Google's globally distributed edge points of presence to accelerate content delivery for websites and applications served out of Google Compute Engine and Google Cloud Storage.

Question 69

Your colleague has asked for help in creating an IAM role using Google Cloud CLI. Which of the following is the correct command to create an IAM role?

Answer 69

The gcloud command to create an IAM user is gcloud iam roles create viewer-role --project whizlabs-prj --file=role-definition.yaml.

Question 70

While migrating traffic gradually between the 2 versions of your Flexible App Engine environment, you have encountered a spike in latency for loading request. Which of the following statement could be a cause of this issue?

Answer 70

Gradual traffic migration between the versions running in flexible environment is not supported. Gradual traffic migration is not supported in flexible environment.

Question 71

John & co has deployed an application using Google App Engine standard environment. You have been asked to update the cron schedules and default cookie expiration time, which of the following predefined role has access to update default cookie expiration but no access to update cron schedules?

Answer 71

App Engine Admin As per google docs, App Engine Admin has access to update default cookie expiration but no access to update cron schedules

Question 72

Your company has been working on an application for the last three months and is now ready to roll out the same to the UAT environment for beta testing. Your manager has asked you to create a replica of dev project. Which is the best way to clone/replicate the existing project?

Answer 72

There is no inbuilt option provided by GCP to clone/replicate the project

Question 73

A developer accidentally deleted some of the files from a bucket. Luckily, the files were not critical and were re-created soon. Because of this, your team lead has asked you to enable versioning on bucket. Which command would help you enable the same?

Answer 73

gsutil versioning set on gs://whizlabs-bucket

Question 74

As a cloud engineer, you have been asked to upgrade the free trial of your account and rename it to a production-inventory-system. You are getting permission denied error while making the changes. Which of the following permissions will solve the problem?

Answer 74

billing.accounts.update The required permission is billing.accounts.update on Billing Account resource.

Question 75

You created a bucket in cloud storage and uploaded some files and then enabled object versioning on it. The files you have already added will have which of the following version?

Answer 75

Null By default, the object will have null version as versioning was enabled after uploading the files.

Question 76

A web application is hosted on VM and its resources are stored in a bucket. You have been asked to let any authenticated user access the very high level blueprint of company’s product. This blueprint does not contain any confidential data or IP data so can be made available to the public as well. What changes are required to make it work?

Answer 76

**allAuthenticatedUsers** will allow any Gmail or Cloud Identity supported authenticated user to access the file.

Question 77

You updated the metadata of an object stored in Reports-PDF bucket using google cloud SDK. You want to ensure that the metadata has been updated for that object before you confirm the changes to the development team. Which of the following google cloud SDK command would you use?

Answer 77

gsutil stat gs://Reports-PDF/[OBJECT\_NAME] The stat command will output details about the specified object URLs.

Question 78

Your client wants to serve content using Cloud Storage that allow similar performance advantage as regions, but also wants higher availability that comes with being geo-redundant. You plan to use dual region to meet his requirement. Choose the regions that does not fall under dual region compatibility. A- nam4 B- us C- eur4 D- eu

Answer 78

Select 2: eu and us

Question 79

Your department head has asked you to create a new custom manual VPC with three subnets having 20 usable IP addresses individually. Which subnet mask suits your requirement?

Answer 79

27 ## Footnote IPv4 consists of 4 octets which sum up to 32 bit. The formula to calculate the number of hosts is 2 power of n where n is the difference between 32 and subnet mask to be used. In this case, it will be 2 power of 5 = 32 hosts. In each CIDR block, two IPs are reserved: one for the network address and another one for broadcast which leaves us with 30 usable IP addresses. 32 - 27 = 5 2 power of 5 = 32 total IP addresses 32 - 2 = 30 usable IP addresses

Question 80

A new client has approached your company with a requirement that they want to host a serverless on Google Cloud, but before that want you to give them price estimate of running serverless application using Cloud Function. Which all parameters will you consider while calculating price using Google Pricing Calculator?

Answer 80

You will need four parameters to give your client an estimate of running Cloud Functions. These are: Type, Bandwidth, Execution Time and Invocations per month.

Question 81

Which of the following role provide granular access for a specific service and is managed by GCP? Custom Predefined Admin Primitive

Answer 81

Predefined roles are managed roles and provide service specific access

Question 82

You have created a pre-populated PersistentVolume disk as ReadOnlyMany, when you try to mount the volume to a POD, you get failed to mount error, what could be the most likely reason for this failure?

Answer 82

You created a PersistentVolume but did not create a PersistentVolumeClaim

Question 83

While working on a project, an application administrator has been given the responsibility of managing all resources. He wants to delegate the responsibility of managing the existing service accounts to another administrator. He will also be responsible to manage the other service accounts that will be created. Which of the following is the best way to delegate the privileges required to manage all the service accounts?

Answer 83

Granting iam.serviceAccountUser to the administrator at the project level. A user can manage all the service accounts in the project if service account user role iam.serviceAccountUser is granted to him at the project level. Also, whenever a new service account will be created, the administrator will be granted iam.serviceAccountUser automatically for that new service account.

Question 84

You as a Senior Cloud Engineer doing POC on a business-critical application having database deployed on a GCE virtual machine. The requirement is to have a disk that supports up to 35,000 IOPS per instance. Which of the following disks is suitable to meet the requirement?

Answer 84

SSD Persistent Disk SSD Persistent Disk supports up to 15000-60000 IOPS per instance

Question 85

A new junior engineer is joining your team. Your manager asks you to create an IAM user for him because he is out of the office today and has very limited access to the internet. You are trying to create an IAM user for the new joiner, but you receive an error saying: “Email addresses and domains must be associated with an active Google Account or Google Apps Account”. What is the possible reason for this?

Answer 85

As the error says you need to first create a user for the new joiner in GSuite or invalid Identity Platform.

Question 86

Your team is building a media collection and analysis application for one of your clients. They have asked you to enable Google Photos API and YouTube API. Moreover, they want to test the API without integrating it within the application. Which service would help your development team test the API without integration?

Answer 86

API Explorer lets you make API calls to the service without actually integrating it within your application.

Question 87

You have been asked to create VPC for a two-tier architecture for the frontend and backend of the application. Additionally, you need to make sure that backend instances are only reachable via frontend instances. What is the best approach to achieve this?

Answer 87

Just provide the service account attached to your frontend instance as a source filter for backend firewall and every instance launched in the future will be able to access it without additional changes.

Question 88

Your managers want you to suggest a low-cost storage option that could be used to share read-only data across multiple instances with high performance and no edge caching. Which storage option would you suggest?

Answer 88

Cloud Storage is reliable object storage with an Option for no edge-caching service

Question 89

You are currently working on a freelance project where you have to deploy a WordPress website on VM. You decided to use startup script to install WordPress and other libraries instead of manual install. While launching you forgot to use startup script and are wondering how to do it now?

Answer 89

Stop the instance, add a metadata with startup-script as key, and script content as value, and start the instance.

Question 90

You work for a retail company that has a busy online store. As you are approaching New Year, you find that your e-store is getting more and more traffic. You ensure that your web servers are behind a managed instance group. However, you notice that the web tier is frequently scaling, sometimes multiple times in an hour. You need to prevent the instance group from scaling up and down so rapidly. Which of the following options would help you to achieve this?

Answer 90

Increase the cool down period.

Question 91

You are distributing the traffic between a fleet of VMs with in your VPC using Internal TCP/UDP Load Balancer. Which of the following specification does not support the selected Load Balancing Type?

Answer 91

Global Availability Internal TCP/UDP Load Balancer are available within a Region and not Globally

Question 92

Which of the following command could be used to autoscale a replication controller “foo” with number of pods between 1 to 10 having target cpu utilization at 80%?

Answer 92

**kubectl autoscale rc foo --max=10 --cpu-percent=80** ## Footnote This command is used to autoscale a replication controller with max 10 pods. It is important to specify --max flag as it defines the target pods that could be launched when cpu reaches 80%.

Question 93

Your client has a web application that is currently using a single GCE to read the messages from a pub/sub topic, process them and store them in Cloud Bigtable by its unique order id. When a user uploads an order to Cloud Storage, it triggers a Cloud Function that inserts a message to pub/subtopic. The traffic is expected to increase next week and as a cloud engineer, you are expected to resolve any possible auto scaling problem. Which service is not likely to auto scale when the traffic is increased?

Answer 93

GCE

Question 94

You were inspecting the containers running on a VM and found out that a pod is running which is no more required. You try to delete it but every time a new pod is created. What do you need to delete now for removing that pod?

Answer 94

**ReplicaSet** is responsible for maintain the desired number of pods hence, deleting it will delete the pod as well.

Question 95

You are working with a healthcare startup as Google Cloud Consultant on a new project which they are about to launch next week as a beta version. All the static files are stored on GCS and you have been asked to make one of the PDF named whizlabs-bucket publicly available for the customers to download. You only have access to CLI to achieve the same. Which of the following command would you use to do it?

Answer 95

gsutil acl ch -u allUsers:r gs://whizlabs-bucket/file.pdf

Question 96

Your company hired a Big Data consultant for creating real-time reporting application using roles/bigquery.dataOwner role provides permission to read, update, and delete the dataset. can create table but not new datasetGoogle Cloud service like BigQuery and PowerBI reporting tool. Your manager asked you to create an IAM user which gives him access to read, update, and delete the dataset but not to create one. Which role would you assign to him?

Answer 96

roles/bigquery.dataOwner role provides permission to read, update, and delete the dataset. can create table but not new dataset

Question 97

A stock market company receives real-time updates from different stock prices in the USA. The company seeks a solution that can use stock price data for real-time analysis. The solution should allow high throughput to allow queries to run and return the required results with minimum latency. The solution should also be scaled out for more performance. Which of the following products is the best solution in this scenario?

Answer 97

Cloud BigTable is a petabyte-scale, fully managed NoSQL database service for large analytical and operational workloads. Under a typical workload, Cloud BigTable delivers highly predictable performance. When everything is running smoothly, a typical workload can achieve the following performance for each node in the Cloud Bigtable cluster, depending on which type of storage the cluster uses: In general, a cluster's performance increases linearly as you add nodes to the cluster. For example, if you create an SSD cluster with 10 nodes, the cluster can support up to 100,000 rows per second for a typical read-only or write-only workload, with 6 ms latency for each read or write operation.

Question 98

Your company has 5 TB of testing data stored in the production database of a testing tool name Quality Center. The data is being used to create a real time analytics system which is causing slow response to the tester while using the tool. What should you do the improve the load on the database?

Answer 98

Set up a read replica Read replica can be used to run all the queries related to Analytics system

Question 99

How many maximum instance-hours are supported by an App Engine as free daily usage quota when scaling an instance using Automatic Scaling type?

Answer 99

28 Instance Hours As per google documentation, automatic scaling has a free daily usage quota of 28 instance hours

Question 100

You company has developed an application to accelerate the efficiency in making sales calls about the product of your client. Everytime a recipient is called, log sink is used to export the record to a destination. Which of the following destinations are supported? Choose any 2.

Answer 100

BigQuery - Pub/Sub Log sinks can be exported to Cloud Storage, Pub/Sub and BigQuery only

Question 101

What is the command for creating a storage bucket that has once per month access and is named 'archive\_bucket'?

Answer 101

mb is to make the bucket. Nearline buckets are for once per month access. Coldline buckets require only accessing once per 90 days and would incur additional charges for greater access. Further Explanation Synopsis gsutil mb [-c class] [-l location] [-p proj\_id] url... If you don't specify a -c option, the bucket is created with the default storage class Standard Storage, which is equivalent to Multi-Regional Storage or Regional Storage, depending on whether the bucket was created in a multi-regional location or regional location, respectively. If you don't specify a -l option, the bucket is created in the default location (US). -l option can be any multi-regional or regional location.