Associate-Cloud-Engineer Practice Questions

A.  

Use your existing CI/CD pipeline Use the generated Docker images and deploy them to Cloud Run. Update the configurations and the required endpoints.

B.  

Use your existing continuous integration and delivery (CI/CD) pipeline. Use the generated Docker images and deploy them to Cloud Function. Use the same configuration as on-premises.

C.  

Use the existing codebase and deploy each service as a separate Cloud Function Update the configurations and the required endpoints.

D.  

Use your existing codebase and deploy each service as a separate Cloud Run Use the same configurations as on-premises.

A.  

Implement a Cloud Run job to rotate all service account keys periodically in pj-sa. Enforce an org policy to deny service account key creation with an exception to pj-sa.

B.  

Implement a Kubernetes Cronjob to rotate all service account keys periodically. Disable attachment ofservice accounts to resources in all projects with an exception to pj-sa.

C.  

Enforce an org policy constraint allowing the lifetime of service account keys to be 24 hours. Enforce an org policy constraint denying service account key creation with an exception on pj-sa.

D.  

Enforce a DENY org policy constraint over the lifetime of service account keys for 24 hours. Disable attachment of service accounts to resources in all projects with an exception to pj-sa.

A.  

Grant all members of the DevOps team the role of Project Editor on the organization level.

B.  

Grant all members of the DevOps team the role of Project Editor on the production project.

C.  

Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the production project.

D.  

Create a custom role that combines the required permissions. Grant the DevOps team the custom role on the organization level.

A.  

Use Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 275 days (365 – 90)

B.  

Use Cloud Storage Object Lifecycle Management using Age conditions with SetStorageClass and Delete actions. Set the SetStorageClass action to 90 days and the Delete action to 365 days.

C.  

Use gsutil rewrite and set the Delete action to 275 days (365-90).

D.  

Use gsutil rewrite and set the Delete action to 365 days.

A.  

Enable node auto-provisioning on the GKE cluster.

B.  

Create a VerticalPodAutscaler for those workloads.

C.  

Create a node pool with preemptible VMs and GPUs attached to those VMs.

D.  

Create a node pool of instances with GPUs, and enable autoscaling on this node pool with a minimum size of 1.

A.  

Grant the basic role roles/viewer and the predefined role roles/compute.admin to the DevOps group.

B.  

Create an IAM policy and grant all compute. instanceAdmln." permissions to the policy Attach the policy to the DevOps group.

C.  

Create a custom role at the folder level and grant all compute. instanceAdmln. * permissions to the role Grant the custom role to the DevOps group.

D.  

Grant the basic role roles/editor to the DevOps group.

A.  

Use the GCP Console to transfer the file instead of gsutil.

B.  

Enable parallel composite uploads using gsutil on the file transfer.

C.  

Decrease the TCP window size on the machine initiating the transfer.

D.  

Change the storage class of the bucket from Nearline to Multi-Regional.

A.  

Deploy the application on GKE, and add a HorizontalPodAutoscaler to the deployment.

B.  

Deploy the application on GKE, and add a VerticalPodAutoscaler to the deployment.

C.  

Create a GKE cluster with autoscaling enabled on the node pool. Set a minimum and maximum for the size of the node pool.

D.  

Create a separate node pool for each application, and deploy each application to its dedicated node pool.

A.  

• Ensure that the Ops Agent Is Installed on the Compute Engine instance.• Create a custom metric in the Cloud Monitoring dashboard.• Provide the security team member with access to this dashboard.

B.  

• Ensure that the Ops Agent is installed on tie Compute Engine instance.• Provide the security team member roles/configure.inventoryViewer permission.

C.  

• Ensure that the OS Config agent Is Installed on the Compute Engine instance.• Provide the security team member roles/configure.vulnerabilityViewer permission.

D.  

• Ensure that the OS Config agent is installed on the Compute Engine instance• Create a log sink Co a BigQuery dataset.• Provide the security team member with access to this dataset.