Google Associate Cloud Engineer (Associate_Cloud_Engineer)

You host a static website on Cloud Storage. Recently, you began to include links to PDF files on this site. Currently, when users click on the links to these PDF files, their browsers prompt them to save the file onto their local system. Instead, you want the clicked PDF files to be displayed within the browser window directly, without prompting the user to save the file locally. What should you do?

Your company would like to store invoices and other financial documents in Google Cloud. You need to identify a Google-managed solution to store this information for your company. You must ensure that the documents are kept for a duration of three years. Your company’s analysts need frequent access to invoices from the past six months. After six months, invoices should be archived for audit purposes only. You want to minimize costs and follow Google-recommended practices. What should you do?

You have a virtual machine that is currently configured with 2 vCPUs and 4 GB of memory. It is running out of memory. You want to upgrade the virtual machine to have 8 GB of memory. What should you do?

You are planning to migrate your containerized workloads to Google Kubernetes Engine (GKE). You need to determine which GKE option to use. Your solution must have high availability, minimal downtime, and the ability to promptly apply security updates to your nodes. You also want to pay only for the compute resources that your workloads use without managing nodes. You want to follow Google-recommended practices and minimize operational costs. What should you do?

You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over Internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?

You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?

You are managing binary large objects (BLOBs) stored in a regional Cloud Storage bucket. The bucket has Object Versioning

enabled to protect against accidental data loss, and it is used by an automated process that frequently uploads new versions of objects. You need to implement a cost-control measure that automatically and permanently deletes all noncurrent object versions 30 days after they are replaced by a newer version. What should you do?

Your company has a Google Cloud Platform project that uses BigQuery for data warehousing. Your data science team changes frequently and has few members. You need to allow members of this team to perform queries. You want to follow Google-recommended practices. What should you do?

Your company wants to provide engineers with access to explore Google Cloud freely in a sandbox environment. The total

budget for testing across your organization is $1000. You need to ensure that engineers are notified when the budget is about to be reached. You want to automate your solution as much as possible. What should you do?

Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.

Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:

You are deploying an application on Google Cloud that requires a relational database for storage. To satisfy your company's

security policies, your application must connect to your database through an encrypted and authenticated connection that requires

minimal management and integrates with Identity and Access Management (IAM), What should you do?

You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?

You are storing your team's container images in Artifact Registry. You need to create a new Google Kubernetes Engine (GKE)

cluster and deploy these containers. You have already configured an IAM service account with the necessary permissions to pull images from Artifact Registry. You must ensure the images can be deployed on the GKE cluster. What should you do?

Your projects incurred more costs than you expected last month. Your research reveals that a development GKE container emitted a huge number of logs, which resulted in higher costs. You want to disable the logs quickly using the minimum number of steps. What should you do?

You work for a large company that recently acquired three smaller startups. All of the startups' Google Cloud resources must

be centrally managed under a single Google Cloud organization. However, each startup has its own budget and financial reporting structure. You need to ensure that each startup receives a separate monthly invoice for its Google Cloud consumption. What should you do?

You have a website hosted on App Engine standard environment. You want 1% of your users to see a new test version of the website. You want to minimize complexity. What should you do?

You are deploying a new frontend service for an online game. The service was built using a micro-frontend architecture and consists of multiple containers that interact using a service mesh. You need to control the number of compute instances that are running at a given time. What should you do?

You have a web application deployed as a managed instance group. You have a new version of the application to gradually deploy. Your web application is currently receiving live web traffic. You want to ensure that the available capacity does not decrease during the deployment. What should you do?

You are developing an internet of things (IoT) application that captures sensor data from multiple devices that have already

been set up. You need to identify the global data storage product your company should use to store this data. You must ensure that the

storage solution you choose meets your requirements of sub-millisecond latency. What should you do?

You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

Your organization has created hundreds of service accounts for different applications hosted on-premises and in other clouds that use Google Cloud APIs. You need to audit the service account keys that have been created and identify the keys that are older than 90 days. What should you do?

You are the organization and billing administrator for your company. The engineering team has the Project Creator role on the organization. You do not want the engineering team to be able to link projects to the billing account. Only the finance team should be able to link a project to a billing account, but they should not be able to make any other changes to projects. What should you do?

You are a Google Cloud organization policy administrator for your company, which operates in a regulated industry. You need

to enforce a policy that restricts all new location-based Google Cloud resources to the australia-southeast1 and australia-

southeast2 regions only. You want to ensure that this policy requires minimal configuration. What should you do?

You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?

You are configuring the network infrastructure for a new application on Google Cloud. The application will run on Compute Engine and consists of:

• Web instances running in a managed instance group that are accessible from the public internet.

• A single database instance that is accessible from the web instances.

All instances will be deployed in the same custom-mode VPC network and subnet. You want to configure the most secure and reliable solution. What should you do?

Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?

Your organization has decided to deploy all its compute workloads to Kubernetes on Google Cloud and two other cloud

providers. You want to build an infrastructure-as-code solution to automate the provisioning process for all cloud resources. What should you do?

You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?

You are deploying a large, multi-tiered application with more than 1,000 IP addresses in a Google Cloud project that needs to

be securely isolated. The application includes the:

1. web tier with frontend servers for public traffic,

2. application tier with servers running core application logic that only need access from the web tier, and

3. database tier with database servers that only need access from the application tier,

You want to minimize cost, complexity, and administrative overhead in the network architecture. What should you do?

You are hosting an application on bare-metal servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google-recommended practices to provide

the application with access to Cloud Storage. What should you do?

You are implementing a company-wide standard to control SSH access for your Google Cloud projects. You want to simplify

SSH access management to your Compute Engine instances while maintaining audit compliance and eliminating as many manual steps as possible.

What should you do?

You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?

You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?

You are deploying an application to Google Kubernetes Engine (GKE) that needs to call an external third-party API. You need

to provide the external API vendor with a list of IP addresses for their firewall to allow traffic from your application. You want to follow Google-recommended practices and avoid any risk of interrupting traffic to the API due to IP address changes. What should you do?

You need to deploy an application, which is packaged in a container image, in a new project. The application exposes an HTTP endpoint and receives very few requests per day. You want to minimize costs. What should you do?

You are managing a web application that needs to read objects from a shared Cloud Storage bucket. You need to grant a

Cloud Run service access to objects in the existing bucket that are named with the site1-data/ prefix while ensuring that the Cloud Run service has access to new objects as they are uploaded. Your solution should require minimal work to implement and maintain.

What should you do?

Your company has an existing GCP organization with hundreds of projects and a billing account. Your company recently acquired another company that also has hundreds of projects and its own billing account. You would like to consolidate all GCP costs of both GCP organizations onto a single invoice. You would like to consolidate all costs as of tomorrow. What should you do?

You are migrating your on-premises workload to Google Cloud. Your company is implementing its Cloud Billing configuration

and requires access to a granular breakdown of its Google Cloud costs. You need to ensure that the Cloud Billing datasets are available in BigQuery so you can conduct a detailed analysis of costs. What should you do?

You built an application on Google Cloud Platform that uses Cloud Spanner. Your support team needs to monitor the environment but should not have access to table data. You need a streamlined solution to grant the correct permissions to your support team, and you want to follow Google-recommended practices.

What should you do?

You recently discovered an issue with your rolling update in Google Kubernetes Engine (GKE). You now need to roll back a

rolling update. What should you do?

For analysis purposes, you need to send all the logs from all of your Compute Engine instances to a BigQuery dataset called platform-logs. You have already installed the Cloud logging agent on all the instances. You want to minimize cost. What should you do?

You are managing a fleet of data storage solutions for your company on Google Cloud, including Bigtable, Cloud SQL,

Memory store, and Spanner. You need a single, unified view to monitor the health of all data storage solutions and identify any that are at risk for downtime. What should you do?

You are using Deployment Manager to create a Google Kubernetes Engine cluster. Using the same Deployment Manager deployment, you also want to create a DaemonSet in the kube-system namespace of the cluster. You want a solution that uses the fewest possible services. What should you do?

Your company's accounting department needs to run an overnight batch workload every day. You must implement a solution

that minimizes the cost to run this workload and automatically retries the batch if an execution fails. What should you do?

You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?

You manage an application that continuously writes logs to a Cloud Storage bucket. The logs are accessed frequently for the

first ten days and then accessed rarely after that. The logs must be retained for three months. You need to configure the Cloud Storage bucket in the most cost-effective way. What should you do?

You are using Container Registry to centrally store your company’s container images in a separate project. In another project, you want to create a Google Kubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?

You are migrating your company's on-premises compute resources to Google Cloud. You need to deploy batch processing

jobs that run every night. The jobs require significant CPU and memory for several hours but can tolerate interruptions. You must ensure that the deployment is cost-effective. What should you do?

You deployed a new application inside your Google Kubernetes Engine cluster using the YAML file specified below.

You check the status of the deployed pods and notice that one of them is still in PENDING status:

You want to find out why the pod is stuck in pending status. What should you do?

You are on a DevOps team responsible for deploying applications that share a standard architecture: a Cloud Run frontend, a Compute Engine backend, and a Cloud SQL database. You need to create a deployment strategy for 50 new applications, each requiring development, testing, QA, and production environments, Each development team will assign a tech lead to work with you on the deployment setup. You have to create a scalable deployment process that minimizes the number of errors. What should you do?

You are setting up a Windows VM on Compute Engine and want to make sure you can log in to the VM via RDP. What should you do?

You are managing your company's archival records that are stored in a Cloud Storage bucket using the Multi Regional storage class. These objects are rarely accessed after 90 days but must be retained indefinitely to meet regulatory compliance requirements. You need to implement a cost-effective process that automatically transitions these objects to the lowest-cost storage class suitable for long-term retention immediately after the 90-day period. What should you do?

You want to configure an SSH connection to a single Compute Engine instance for users in the dev1 group. This instance is the only resource in this particular Google Cloud Platform project that the dev1 users should be able to connect to. What should you do?

You are managing Google Cloud infrastructure with Terraform. The Terraform configuration files are stored in a Git repository.

You need to implement a solution that enables multiple team members to work on the Terraform configurations concurrently without conflicts and ensures that sensitive values are not persisted to local machines. What should you do?

You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project. What should you do?

You are deploying an application to CloueRun. Your application requires the use ot an API that runs on Google Kubemeters

Engine (GKE). You need to ensure that your Cloud Run service can privately reach the API on GKE, and you want to allow Google recommended practices. What should you do?

You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?

Your company Is adopting Google for administration purposes, you need to ensure that your company receives the

minimum number of invoices tor all Google Cloud resource usage. What should you do?

You need to provide a cost estimate for a Kubernetes cluster using the GCP pricing calculator for Kubernetes. Your workload requires high IOPs, and you will also be using disk snapshots. You start by entering the number of nodes, average hours, and average days. What should you do next?

Your company's Human Resources department publishes a Big Query dataset with anonymized information about company sales and products. All employees in your company are managed in the Cloud Identity account and must be able

to view this dataset as an authenticated user. You need to grant all employees in your company read-only access to this Big Query dataset. What should you do?

You are using Google Kubernetes Engine with autoscaling enabled to host a new application. You want to expose this new application to the public, using HTTPS on a public IP address. What should you do?

You have an application that reads data from a Pub/Sub topic. During local development, you authenticated using your personal credentials to test the application. You now want to deploy the application to Vertex Al and have created a new service account to be used as the application's identity. You need to ensure that the deployed application can still access the Pub/Sub topic.

What should you do?

You need to enable traffic between multiple groups of Compute Engine instances that are currently running two different GCP projects. Each group of Compute Engine instances is running in its own VPC. What should you do?

You are creating an isolated Google Cloud environment for a new data science team. The team needs to experiment with

machine learning models in short-lived projects and requires full administrative access. All team members belong to the same group.

Your solution must restrict resource creation to the us-east: region and only allow the use of BigQuery and Cloud Storage. What should you do?

You want to add a new auditor to a Google Cloud Platform project. The auditor should be allowed to read, but not modify, all project items.

How should you configure the auditor's permissions?

You are creating a Compute Engine virtual machine (VM) instance for a new application. Your organization's policy prohibits assigning external IP addresses to VM instances for security reasons. However, the application on the instance needs to access the internet to download necessary software updates and packages. What should you do?

You are operating a Google Kubernetes Engine (GKE) cluster for your company where different teams can run non-production workloads. Your Machine Learning (ML) team needs access to Nvidia Tesla P100 GPUs to train their models. You want to minimize effort and cost. What should you do?

You have an application that is currently processing transactions by using a group of managed VM instances. You need to migrate the application so that it is serverless and scalable. You want to implement an asynchronous transaction processing system. while minimizing management overhead. What should you do?

Your VMs are running in a subnet that has a subnet mask of 255.255.255.240. The current subnet has no more free IP addresses and you require an additional 10 IP addresses for new VMs. The existing and new VMs should all be able to reach each other without additional routes. What should you do?

You are developing a monitoring application that runs on a Google Kubernetes Engine (GKE) cluster. The application requires credentials from a service account to collect performance data. However, your organization has a policy that prohibits the creation of new service account keys. You need to grant the application access while following Google-recommended security practices. What should you do?

Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?