SuperEasy Guide to Clear Google Associate Cloud Engineer Certification Exam

SuperEasy Guide to Clear Google Associate Cloud Engineer Certification Exam

Edcorner Learning

Introduction

You've come to the correct place if you're already studying for the for Google Associate Cloud Engineer Certification and looking for some great book to help you prepare.

SuperEasy Guide to clear Google Associate Cloud Engineer Certification Exam book will help you prepare for the certification test and become an Certified Google Associate Cloud Engineer.

Google Cloud Platform (GCP) certification is one of the hottest certifications right now, and it's a must-have for any IT professional working in the cloud computing space. The Google Associate Cloud Engineer certification is the first step on your way to becoming a Google Cloud expert. It is a foundational certification designed to familiarize candidates with GCP's tools and technologies.

Google Cloud certifications are a great way to show off your knowledge of the Google Cloud Platform. The Google Cloud Associate Cloud Engineer Certification is an excellent place to begin your Google Cloud adventure. It serves as an excellent stepping stone toward Google Cloud Professional Cloud Architect, Developer, and DevOps certifications.

What Is the Role of a Cloud Engineer?

A cloud engineer is an IT expert who is in charge of technological tasks such as design, planning, management, maintenance, and support that are linked with cloud computing. A Cloud Engineer can work in any of the following industries:

• Engineer for Cloud Security

• Engineer, Systems (Cloud)

• Developer for the Cloud

• Architect for the Cloud

• Network Cloud Engineer

As of 2022, the average income for a Cloud Engineer in the United States is $122,889, with a salary range of $113,473 to $134,498.

Advantages of Certification

The first question that comes to mind before taking any certification or course is, "What is the purpose of this certification?" or "How will this certification benefit me in my career?" So, here are some ideas to get you started:

• With the growing demand for Cloud Engineers, having a CV with this sparkling qualification will give you an advantage.

• Certification leads to a significant increase in career opportunities and wages.

• The majority of respondents believe that certification has increased their earnings, and 84 percent believe that certification has enhanced their career prospects.

• Adding this credential to your resume will improve your career prospects and increase your chances of being chosen.

• Obtaining certification will aid in establishing a relationship with Google Cloud Platform services and technologies, as well as obtaining extensive hands-on expertise with GCP tools and procedures.

Syllabus for Google Associate Cloud Engineer

It is critical to familiarize oneself with all of the necessary topics in order to pass the exam on the first attempt. So, to pass the Google Cloud Certified Associate Cloud Engineer exam, below is a list of crucial topics that one should be familiar with:

•Set up a cloud solution environment.

•Plan and reinforce a cloud solution.

•Deploy and execute a cloud solution.

•Ensure the successful operation of a cloud solution.

•Configure permit and security.

About the Google Associate Cloud Engineer Certification exam

Here's a fast rundown of the essential exam information, such as the amount of questions, exam time, registration fee, and exam type.

•Length of the exam: Two hours

•Exam fee: $125 (plus tax can be applicable)

•Languages: English, Japanese, Spanish, Indonesian.

•Exam format: Multiple choice and multiple select, taken remotely or in person at a test center.

•Exam Delivery Method: Take the online-proctored exam from a remote location.

•Prerequisites: None

•Recommended experience: 6 months+ hands-on experience with Google Cloud.

Google Associate Cloud Engineer Certification Preparation Series

There are 3 books in this series having different questions and answers all available on Amazon:

Ultimate Guide for Google Associate Cloud Engineer Certification Exam

SuperEasy Guide to clear Google Associate Cloud Engineer Certification Exam

Incredible Success Guide for Google Associate Cloud Engineer Certification Exam

I have published these 3 books differently to take care of book length, ultimately learner or readers can complete the book easily and enjoy. Thanks for your understanding.

Please leave a review it motivates a lot. All the very best for your exam and clear your exam successfully.

Module 1: Getting Started

Question #:1  An application needs to be migrated from your on-premise data center to Google Cloud App Engine. You modified your application to use Cloud Pub/Sub with a specific service account which has the necessary permissions to publish and subscribe on Pub/Sub. However, Cloud Pub/Sub API has not yet been enabled. What should you do?

1.  You should grant roles/pubsub.admin IAM role to the service account and modify the application code to enable the API before publishing or subscribing.

2.  You should configure the App Engine to use a specific service account with the necessary permissions and rely on the automatic enablement of the Cloud Pub/Sub API on the first request to publish or subscribe.

3.  You should use Deployment Manager to configure the App Engine to use a specific service account with the necessary permissions and rely on the automatic enablement of the Cloud Pub/Sub API on the first request to publish or subscribe.

4.  You should navigate to the APIs & Services section in Google Console and enable Cloud Pub/Sub API.

Answer: 4

Explanation
https://cloud.google.com/endpoints/docs/openapi/enable-api

Question #:2  Which statement is true about billing for solutions deployed using Cloud Marketplace?

1.  You only pay for the core GCP resources you use, with any additional fees for commercially licensed software.

2.  Cloud Marketplace solutions are free.

3.  After a trial period, each Cloud Marketplace solution charges you a fixed monthly fee.

4.  You only pay for the core GCP resources you use, with no additional fees for commercially licensed software.

Answer: 1

Explanation
Many software packages in Cloud Marketplace are free to use, and you only pay the standard usage fees for the Google Cloud resources that you run the software on. If you buy commercial software from Cloud Marketplace, such as a virtual machine (VM) with software installed, a Kubernetes app, or a software as a service (SaaS) product, you are charged for the software and for the Google Cloud resources that you use. The software usage fees appear as a separate item on your monthly Google Cloud invoice.
https://cloud.google.com/marketplace/docs/understanding-billing

Question #:3  You are considering to use App Engine for deployment. In the future, you'd like to ssh into instance. Which environment should you choose?

1.  Standard

2.  Flexible

3.  Custom

4.  Enhanced

Answer: 2

Explanation
You should choose Flexible environment.
https://cloud.google.com/appengine/docs/flexible

Question #:4  Select all true statements about resizing a persistent disk (Compute Engine). (select 3)

1.  You can resize disks at any time, whether or not the disk is attached to a running VM.

2.  It's a Google's best practice to back up your disk by creating a snapshot before you make any changes.

3.  You can reduce the size of a persistent disk.

4.  You can increase the size of your persistent disk.

5.  You can resize the disks only after the virtual machine is shut down.

Answer: 1,2,4

Explanation
You can increase the size of your persistent disk when your virtual machine (VM) instance requires additional storage space or higher performance limits. You can only resize a persistent disk to increase its size. You cannot reduce the size of a persistent disk. You can resize disks at any time, whether or not the disk is attached to a running VM. Compute Engine manages the hardware behind persistent disks, so that you can add and resize your disks without handling striping or redundancy.
https://cloud.google.com/compute/docs/disks/resize-persistent-disk

Question #:5  Which of these values is chosen by the customer, globally unique, permanent and unchangeable?

1.  The project name.

2.  The project number.

3.  The project ID.

4.  The project's billing credit-card number.

Answer: 3

Explanation
A project ID is a unique string used to differentiate your project from all others in Google Cloud. You can use the Cloud Console to generate a project ID, or you can choose your own. You can only modify the project ID when you're creating the project.
https://cloud.google.com/resource-manager/docs/creating-managing-projects#before_you_begin

Question #:6  What is the difference between IAM basic roles and IAM predefined roles?

1.  Basic roles can only be granted to single users. Predefined roles can be associated with a group.

2.  Basic roles can be changed after assignment. Predefined roles can never be changed.

3.  Basic roles only apply to the owner of the GCP project. Predefined roles can be assigned to any user.

4.  Basic roles affect all resources in a GCP project. Predefined roles apply to a specific service in a project.

Answer: 4

Explanation
There are several basic roles that existed prior to the introduction of IAM: Owner, Editor, and Viewer. These roles are concentric; that is, the Owner role includes the permissions in the Editor role, and the Editor role includes the permissions in the Viewer role. They were originally known as "primitive roles".
IAM provides predefined roles that give granular access to specific Google Cloud resources and prevent unwanted access to other resources. These roles are created and maintained by Google. Google automatically updates their permissions as necessary, such as when Google Cloud adds new features or services.
https://cloud.google.com/iam/docs/understanding-roles#basic
https://cloud.google.com/iam/docs/understanding-roles#predefined

Question #:7  As a Cloud Engineer, you are responsible for the user management service for your global company. This service will perform basic operations such as viewing, adding, updating, deleting addresses. Each of these operations is implemented by a Docker container microservice. The processing load can vary from low to very high. You want to deploy the service on Google Cloud for scalability and minimal administration. What should you do?

1.  You should combine four microservices into a single Docker image, and deploy it to the App Engine instance.

2.  You should deploy your Docker containers into GKE.

3.  You should deploy your Docker containers into Cloud Run.

4.  You should start each Docker container as a Managed Instance Group (MIG).

Answer: 3

Explanation
Cloud Run is a managed compute platform that enables you to run containers that are invocable via requests or events. Cloud Run is serverless: it abstracts away all infrastructure management, so you can focus on what matters most - building great applications.
https://cloud.google.com/run/docs/deploying

Question #:8  A trainee recently joined your team and needs access to the Compute Engine in a sandbox project to learn more about various settings and run compute instances to test the features. With Google's best practices in mind, how do you get the trainee access to Compute Engine?

1.  You should grant Compute Admin role for the sandbox project.

2.  You should grant Compute Storage Admin role for the sandbox project.

3.  You should create a shared VPC to enable the intern access Compute resources.

4.  You should grant Compute Instance Admin role for the sandbox project.

Answer: 4

Explanation
Compute Instance Admin role
Permissions to create, modify, and delete virtual machine instances. This includes permissions to create, modify, and delete disks, and also to configure Shielded VM settings.
https://cloud.google.com/compute/docs/access/iam#predefinedroles

Question #:9  VPC networks can be securely connected in hybrid environments by using... (select 2)

1.  VPC Network Peering

2.  Cloud DNS

3.  Cloud VPN

4.  Cloud Interconnect

Answer: 3,4

Explanation
Cloud VPN securely connects your peer network to your Virtual Private Cloud (VPC) network through an IPsec VPN connection. Traffic traveling between the two networks is encrypted by one VPN gateway and then decrypted by the other VPN gateway. This action protects your data as it travels over the internet. You can also connect two instances of Cloud VPN to each other.
Cloud Interconnect provides low latency, high availability connections that enable you to reliably transfer data between your on-premises and Google Cloud Virtual Private Cloud (VPC) networks. Also, Interconnect connections provide internal IP address communication, which means internal IP addresses are directly accessible from both networks.
https://cloud.google.com/network-connectivity/docs/vpn/concepts/overview
https://cloud.google.com/network-connectivity/docs/interconnect/concepts/overview

Question #:10  Choose the correct completion of the sentence below.

1.  Services and APIs are enabled on a per-... basis.

2.  project

3.  organization

4.  billing account

5.  folder

Answer: 2

Explanation
https://cloud.google.com/resource-manager/docs/cloud-platform-resource-hierarchy

Question #:11  A service account...

1.  ...is not associated with public/private RSA key pairs.

2.  ...has password and can log in via web browser.

3.  ...is a special kind of account used by an application or compute workload to make authorized API calls, authorized as either the service account itself, or as Google Workspace or Cloud Identity users.

4.  ...only works with Compute Engine instances.

Answer: 3

Explanation
A service account is a special kind of account used by an application or compute workload, such as a Compute Engine virtual machine (VM) instance, rather than a person. Applications use service accounts to make authorized API calls, authorized as either the service account itself, or as Google Workspace or Cloud Identity users through domain-wide delegation.
https://cloud.google.com/iam/docs/service-accounts

Question #:12  This type of storage is the lowest-cost, highly durable storage service for data archiving, online backup, and disaster recovery (365-day minimum storage duration). Which type of class storage is it?

1.  Coldline

2.  Nearline

3.  Standard

4.  Archive

Answer: 4

Explanation
Archive Storage is the lowest-cost, highly durable storage service for data archiving, online backup, and disaster recovery. Unlike the "coldest" storage services offered by other Cloud providers, your data is available within milliseconds, not hours or days.
Standard Storage is best for data that is frequently accessed ("hot" data) and/or stored for only brief periods of time.
Nearline Storage is a low-cost, highly durable storage service for storing infrequently accessed data. Nearline Storage is a better choice than Standard Storage in scenarios where slightly lower availability, a 30-day minimum storage duration, and costs for data access are acceptable trade-offs for lowered at-rest storage costs.
Coldline Storage is a very-low-cost, highly durable storage service for storing infrequently accessed data. Coldline Storage is a better choice than Standard Storage or Nearline Storage in scenarios where slightly lower availability, a 90-day minimum storage duration, and higher costs for data access are acceptable trade-offs for lowered at-rest storage costs.
https://cloud.google.com/storage/docs/storage-classes#archive

Question #:13  As a cloud consultant, you need to prepare a migration strategy for a company that wants to migrate all applications from its on-premise data center to GCP. The company's DevOps team currently use Jenkins to automate configuration updates. What should you recommend?

1.  Jenkins can be delivered using Google Marketplace.

2.  Create a YAML Kubernetes Deployment file referencing the Jenkins docker image and deploy to the new GKE cluster.

3.  Download the Jenkins binary from Jenkins website and deploy to the new Compute Engine instance.

4.  Download the Jenkins binary from Jenkins website and deploy in App Engine Standard environment.

Answer: 1

Explanation
https://cloud.google.com/jenkins

Question #:14  In Cloud Shell you want to set default compute zone to europe-central2-a for your project. Which command should you use?

1.  > gcloud config set compute zone europe-central2-a

2.  > gcloud set zone europe-central2-a

3.  > gcloud config set zone europe-central2-a

4.  > gcloud config set compute/zone europe-central2-a

Answer: 4

Explanation
https://cloud.google.com/sdk/gcloud/reference/config/set

Question #:15  Your organization has two Google Cloud projects and you want them to share policies. What's the best practice in this case?

1.  Combine two projects into one.

2.  You should duplicate all the policies on one project onto the other.

3.  You cannot share policies between two projects.

4.  Place both projects into a folder, and define the policies on this folder.

Answer: 4

Explanation
https://cloud.google.com/resource-manager/docs/creating-managing-folders

Question #:16  Suppose you want to create a group of virtual machines for processing big data (Hadoop, Spark). You can afford to interrupt jobs as they can be easily recreated. The solution must be as low cost as possible. What should you do?

1.  You should create a Managed Instance Group with VMs in a single zone.

2.  You should create a Managed Instance Group with VMs in multiple zones.

3.  You should create a Managed Instance Group that uses preemptible VMs.

4.  You should create a Unmanaged Instance Group.

Answer: 3

Explanation
Preemptible VM instances are available at much lower price - a 60-91% discount - compared to the price of standard VMs. However, Compute Engine might stop (preempt) these instances if it needs to reclaim the compute capacity for allocation to other VMs. Preemptible instances use excess Compute Engine capacity, so their availability varies with usage.
https://cloud.google.com/compute/docs/instance-groups/creating-groups-of-managed-instances#create_managed_group

Question #:17  Select all true statements about labels in GCP. (select 3)

1.  You can use labels to distinguish components, for example, component:backend and component:forntend.

2.  You can use labels to distinguish resources owned by different teams, for example, team:development and team:testing.

3.  A label is a key-value pair that helps you organize your Google Cloud resources.

4.  Labels cannot be used as queryable annotations for resources.

Answer: 1,2,3

Explanation
A label is a key-value pair that helps you organize your Google Cloud resources. You can attach a label to each resource, then filter the resources based on their labels. Information about labels is forwarded to the billing system, so you can break down your billed charges by label.
https://cloud.google.com/resource-manager/docs/creating-managing-labels

Question #:18  A mission-critical application runs on several virtual machines in on-premise data center and needs to be migrated to GCP. As a cloud consultant, you need to prepare a migration strategy. The company wants to benefit from lift and shift approach, and this application needs to be scaled automatically and efficiently based on the CPU utilization. What do you recommend?

1.  This company should deploy the application to Compute Engine Unmanaged Instance Group with autoscaling enabled based on CPU utilization.

2.  This company should deploy the application to Google Compute Engine Managed Instance Group with time-based autoscaling based on last months traffic patterns.

3.  This company should deploy the application to GKE cluster with Horizontal Pod Autoscaling enabled based on CPU utilization.

4.  This company should deploy the application to Compute Engine Managed Instance Group with autoscaling enabled based on CPU utilization.

Answer: 4

Explanation
Managed instance groups (MIGs) offer autoscaling capabilities that let you automatically add or delete virtual machine (VM) instances from a MIG based on increases or decreases in load. Autoscaling helps your apps gracefully handle increases in traffic and reduce costs when the need for resources is lower. You define the autoscaling policy and the autoscaler performs automatic scaling based on the measured load and the options you configure. Autoscaling works by adding more VMs to your MIG when there is more load (scaling out, sometimes referred to as scaling up), and deleting VMs when the need for VMs is lowered (scaling in or down).
https://cloud.google.com/compute/docs/autoscaler

Question #:19  You need to connect to your Linux virtual machine in GCP using third-party tool. What do you need?

1.  To be able to connect, you need to create an SSH key and add it to your virtual machine.

2.  You cannot connect to the virtual machine using a third-party tool.

3.  GCP creates SSH keys on your behalf, you don't have to worry about it.

4.  You need to create a new user account to be able to connect.

Answer: 1

Explanation
If you connect to Linux VMs using the Google Cloud Console or the Google Cloud CLI, Compute Engine creates SSH keys on your behalf. If you connect to Linux VMs using third party tools or OpenSSH, you need to add a key to your VM before you can connect. If you don't have an SSH key, you must create one.
https://cloud.google.com/compute/docs/connect/create-ssh-keys

Question #:20  Which command should you use to create a bucket named ace-cloud-platform-course in Cloud Shell in your default location?

1.  > gsutli mv gs://ace-cloud-platform-course

2.  > gsutli mb gs://ace-cloud-platform-course

3.  > gcloud mb gs://ace-cloud-platform-course

4.  > gsutli create gs://ace-cloud-platform-course

Answer: 2

Explanation
https://cloud.google.com/storage/docs/gsutil/commands/mb

Question #:21  To run periodic resource updates in your Google Cloud environment, you need to write some automatic scripts. What tools can you install on your own computers to run these scripts?

1.  The Cloud Console Mobile app

2.  The Cloud SDK

3.  The Cloud Shell

4.  The Google Cloud Console

Answer: 2

Explanation
https://cloud.google.com/sdk/docs/quickstart

Question #:22  As a cloud consultant, you need to advise what to do in the following situation. A development team needs to directly connect their on-premises resources to several virtual machines inside a VPC. They want fast and secure access to these virtual machines with minimal maintenance and cost. What do you recommend?

1.  They should set up Cloud Interconnect.

2.  They should start a Compute Engine virtual machine, install a software router, and create a direct tunnel to each virtual machine.

3.  They should use Cloud VPN to create a bridge between the VPC and their network.

4.  They should assign a public IP address to each virtual machine and assign a strong password to each of them.

Answer: 3

Explanation
Cloud VPN is correct because it agrees with the Google recommended practices. Cloud Interconnect is significantly more expensive than other existing solutions.
https://cloud.google.com/network-connectivity/docs/vpn

Question #:23  Personally identifiable information (PII) and sensitive information about your company's customers should be stored securely in Cloud Storage. Several people from your company's compliance department need access to some of this information. What should you do to follow Google's best practices?

1.  You should grant Storage Object Creator role to your co-workers.

2.  You should create additional bucket, enable public access, and provide specific file URLs to your co-workers.

3.  You should grant Storage Object Viewer role to your co-workers.

4.  You should use granular ACLs on the bucket.

Answer: 4

Explanation
You most likely want to use ACLs if you need to customize access to individual objects within a bucket, since IAM permissions apply to all objects within a bucket. However, you should still use IAM for any access that is common to all objects in a bucket, because this reduces the amount of micro-managing you have to do.
https://cloud.google.com/storage/docs/access-control/lists

Question #:24  What types of environments are available in App Engine? (select two)

1.  Development

2.  Standard

3.  Testing

4.  Flexible

Answer: 2,4

Explanation
You can run your applications in App Engine by using the App Engine flexible environment or the App Engine standard environment.
https://cloud.google.com/appengine/docs/the-appengine-environments

Question #:25  You have a Kubernetes deployment in Google Kubernetes Engine (GKE) that has a backend service. You also have pods that run the frontend service. You want to make sure that there is no interruption in communication between your frontend and backend service pods if they are moved or restarted. What should you do?

1.  You should assign static internal IP addresses that the frontend service can use to access the backend pods.

2.  You should assign static external IP addresses that the frontend service can use to access the backend pods.

3.  You should create a DNS entry with a fixed IP address that the frontend service can use to reach the backend service.

4.  You should create a service that groups your pods in the backend service, and tell your frontend pods to communicate through that service.

Answer: 4

Explanation
The idea of a service is to group a set of Pod endpoints into a single resource. You can configure various ways to access the grouping. By default, you get a stable cluster IP address that clients inside the cluster can use to contact Pods in the Service. A client sends a request to the stable IP address, and the request is routed to one of the Pods in the Service.
https://cloud.google.com/kubernetes-engine/docs/concepts/service

Question #:26  TensorFlow is...

1.  ...a managed GCP service for building machine learning models.

2.  ...a managed GCP service for building data pipelines.

3.  ...a hardware device designed to accelerate machine learning workloads.

4.  ...an open-source software library that’s useful for building machine learning applications.

Answer: 4

Explanation
TensorFlow is an end-to-end open source platform for machine learning. It has a comprehensive, flexible ecosystem of tools, libraries and community resources that lets researchers push the state-of-the-art in ML and developers easily build and deploy ML powered applications.
https://www.tensorflow.org/api_docs

Question #:27  After using GCP for a while, you noticed that your storage costs exceeded your project budget. You have a bucket in your project that stores application logs. You can afford to delete logs older than 30 days. What should you do to reduce costs?

1.  You should write a script that deletes logs older than 30 days and schedule the script with Cron Scheduler.

2.  You should add a lifecycle management policy that deletes logs older than 30 days.

3.  You can't reduce costs in this case.

4.  You should remove it manually every month.

Answer: 2

Explanation
To support common use cases like setting a Time to Live (TTL) for objects, retaining noncurrent versions of objects, or "downgrading" storage classes of objects to help manage costs, Cloud Storage offers the Object Lifecycle Management feature.
https://cloud.google.com/storage/docs/lifecycle

Question #:28  Select all true statements about Managed Instance Groups - MIGs. (select 3).

1.  When a virtual machine is deleted in MIG, all corresponding permanent disks will be deleted.

2.  To retain your data in a MIG, you can back up the data in another centralized location, such as Cloud Storage, or add configuration for stateful disks.

3.  In a single zone, you can create up to 10,000 VMs in a single MIG by default.

4.  Compute Engine creates each VM in a MIG based on the configuration that you set in the MIG's instance template.

Answer: 1,2,4

Explanation
A managed instance group (MIG) is a group of virtual machine (VM) instances that you treat as a single entity. Each VM in a MIG is based on an instance template.
https://cloud.google.com/compute/docs/instance-groups/creating-groups-of-managed-instances

Question #:29  Your company needs to store audit logs of a project for at least 5 years. From time to time you would like to do some log analytics. What should you do in this case?

1.  You should route audit logs to Pub/Sub.

2.  You should route audit logs to BigQuery.

3.  You should route audit logs to Bigtable.

4.  You should route audit logs to Cloud Storage.

Answer: 2

Explanation
You can route audit logs to supported destinations in the same way that you can route other kinds of logs. Here are some reasons you might want to route your audit logs:
- To keep audit logs for a longer period of time or to use more powerful search capabilities, you can route copies of your audit logs to Cloud Storage, BigQuery, or Pub/Sub. Using Pub/Sub, you can route to other applications, other repositories, and to third parties.
- To manage your audit logs across an entire organization, you can create aggregated sinks that can route logs from any or all Cloud projects in the organization.
- If your enabled Data Access audit logs are pushing your Cloud projects over your log allotments, you can create sinks that exclude the Data Access audit logs from Logging.
https://cloud.google.com/resource-manager/docs/audit-logging#exporting_audit_logs

Question #:30  Your company has a very complex organization hierarchy. An external auditor has requested to view this hierarchy. With Google's best practices in mind, what should you do?

1.  You should add all individual auditors to an IAM group and grant the Viewer role.

2.  You should grant all individual auditors the Browser role.

3.  You should add all individual auditors to an IAM group and grant the Browser role.

4.  You should grant all individual auditors the Viewer role.

Answer: 3

Explanation
Browser (roles/browser):
- Read access to browse the hierarchy for a project, including the folder, organization, and IAM policy. This role doesn't include permission to view resources in the project.
https://cloud.google.com/iam/docs/understanding-roles#project-roles

Question #:31  Which Google Cloud storage service can you use to host a static website?

1.  Cloud Storage

2.  Cloud SQL

3.  Cloud Datastore

4.  Cloud Filestore

5.  Cloud Spanner

Answer: 1

Explanation
You can host a static website using Cloud Storage bucket.
https://cloud.google.com/storage/docs/hosting-static-website

Question #:32  What kind of cloud computing service provides raw compute, storage, and network organized in ways that are familiar from physical data centers?

1.  Infrastructure as a Service (IaaS).

2.  Database as a Service.

3.  Software as a Service (SaaS),

4.  Platform as a Service (PaaS).

Answer: 1

Explanation
IaaS (infrastructure as a service) is a computing model that offers resources on demand to businesses and individuals via the cloud.
Platform as a Service, also known as PaaS, is a type of cloud computing service model that offers a flexible, scalable cloud platform to develop, deploy, run, and manage apps. PaaS provides everything developers need for application development without the headaches of updating the operating system and development tools or maintaining hardware.
Database as a service (DBaaS) is a cloud computing managed service offering that provides access to a database without requiring the setup of physical hardware, the installation of software or the need to configure the database.
Software as a service (or SaaS) is a way of delivering applications over the Internet - as a service.
https://cloud.google.com/learn/what-is-iaas

Question #:33  A social media company stores images in a Cloud Storage bucket for long term. Images older than 30 days are accessed only in exceptional circumstances, and images older than a year are no longer needed. How can you optimize lifecycle management policy to reduce costs?

1.  You should configure a lifecycle management policy to transition objects older than 30 days to Coldline storage class. Than, configure another lifecycle management policy to delete objects older than 365 days.

2.  You should configure a lifecycle management policy to transition objects older than 30 days to Archive storage class. Than, configure another lifecycle management policy to delete objects older than 365 days.

3.  You should configure a lifecycle management policy to transition objects older than 30 days to Coldline storage class. Than, configure another lifecycle management policy to delete objects older than 335 days.

4.  You should use a Cloud Function to rewrite the storage class to Coldline for objects older than 30 days. And use another Cloud Function to delete objects older than 365 days from Coldline Storage Class.

Answer: 1

Explanation
To support common use cases like setting a Time to Live (TTL) for objects, retaining noncurrent versions of objects, or "downgrading" storage classes of objects to help manage costs, Cloud Storage offers the Object Lifecycle Management feature.
https://cloud.google.com/storage/docs/lifecycle

Question #:34  Select all correct answers. (select 3)

1.  Cloud Logging...

2.  ...requires the use of a third-party monitoring agent.

3.  ...lets you spot anomalies with real-time ingestion, and use log-based metrics to build Cloud Monitoring dashboards.

4.  ...requires that you store your logs in BigQuery.

5.  ...enables you to search, sort, and analyze logs through flexible query statements

6.  ...lets you configure alerts for logs so you stay up to date on important events.

Answer: 3,5,6

Explanation
Cloud Logging is a fully managed service that allows you to store, search, analyze, monitor, and alert on logging data and events from Google Cloud and Amazon Web Services. You can collect logging data from over 150 common application components, on-premises systems, and hybrid cloud systems. Logging includes storage for logs through log buckets, a user interface called the Logs Explorer, and an API to manage logs programmatically. Logging lets you read and write log entries, query your logs, and control how you route and use your logs.
https://cloud.google.com/logging/docs/quickstart

Question #:35  An application is deployed using App Engine to serve production traffic. You've found a critical error in your application and you need to fix this quickly, but you don't know if your solution will cause other problems. What should you do in this case?

1.  You should create a second Google App Engine project with the new application code, and migrate users gradually to the new application.

2.  You should set up a second App Engine service, and then update a subset of clients to hit the new version.

3.  You should deploy the new version of the application temporarily, capture logs and then roll it back to the previous version.

4.  You should deploy the new version of the application, and use traffic splitting to send a small percentage of traffic to it.

Answer: 4

Explanation
App Engine is a fully managed, serverless platform for developing and hosting web applications at scale. You can choose from several popular languages, libraries, and frameworks to develop your apps, and then let App Engine take care of provisioning servers and scaling your app instances based on demand.
You can use traffic splitting to specify a percentage distribution of traffic across two or more of the versions within a service. Splitting traffic allows you to conduct A/B testing between your versions and provides control over the pace when rolling out features.
https://cloud.google.com/appengine/docs
https://cloud.google.com/appengine/docs/standard/python/splitting-traffic

Question #:36  Which GCP load balancing services support IPv6 clients? (select 3)

1.  Network load balancing.

2.  Internal load balancing.

3.  SSL proxy load balancing.

4.  TCP proxy load balancing.

5.  HTTP(S) load balancing.

Answer: 3,4,5

Explanation
You can configure both IPv4 and IPv6 external IP addresses for the following:
- global external HTTP(S) load balancer
- global external HTTP(S) load balancer (classic)
- SSL proxy load balancer
- TCP proxy load balancer
https://cloud.google.com/load-balancing/docs/ipv6

Question #:37  Select all true statements about GCP security. (select 1)

1.  All aspects of security are Google's responsibility.

2.  GCP manages the lower layers of the security stack, such as physical security, and gives customers tools for managing the higher layers.

3.  Customers are responsible for all aspects of security.

4.  Google takes care of the higher parts of the stack, and customers are responsible for the lower parts.

Answer: 2

Explanation
https://cloud.google.com/security/infrastructure/design

Question #:38  You need to classify your application into workload types. Select all stateful applications. (select 2)

1.  Image recognition application that identifies people from images.

2.  A gaming application that constantly tracks user status.

3.  A language recognition application that identifies a language from a text.

4.  A shopping application that saves the user's basket data between sessions.

Answer: 2,4

Explanation
Stateful applications save data to persistent disk storage for use by the server, by clients, and by other applications. An example of a stateful application is a database or key-value store to which data is saved and retrieved by other applications.
https://cloud.google.com/kubernetes-engine/docs/how-to/stateful-apps

Question #:39  VPC networks can be connected to other VPC networks in different projects or organizations by using...

1.  Cloud Interconnect

2.  Cloud CDN

3.  VPC Network Peering

4.  Cloud DNS

Answer: 3

Explanation
VPC Network Peering enables you to connect VPC networks so that workloads in different VPC networks can communicate internally. Traffic stays within Google's network and doesn't traverse the public internet.
https://cloud.google.com/vpc/docs/vpc-peering

Question #:40  As a cloud consultant, you must advise a development team on setting up virtual machines in GCP. The team uses Cloud Console every time they need a virtual machine. You think this is not a productive approach and need to come up with a solution. What Google Cloud service do you recommend?

1.  Cloud Build

2.  Unmanaged Instance Group

3.  Deployment Manager

4.  Managed Instance Group

Answer: 3

Explanation
You can use Google Cloud Deployment Manager to create a set of Google Cloud resources and manage them as a unit, called a deployment. For example, if your team's development environment needs two virtual machines (VMs) and a BigQuery database, you can define these resources in a configuration file, and use Deployment Manager to create, change, or delete these resources. You can make the configuration file part of your team's code repository, so that anyone can create the same environment with consistent results.
https://cloud.google.com/deployment-manager/docs/manage-cloud-resources-deployment

Question #:41  Select all true statements about persistent disks (Compute Engine). (select 3)

1.  Regional persistent disks provide durable storage and replication of data between two zones in different regions.

2.  Compute Engine automatically encrypts your data before it travels outside of your instance to persistent disk storage space.

3.  You can create snapshots of persistent disks to protect against data loss due to user error.

4.  You can attach a persistent disk to an instance in another project.

5.  Regional persistent disks provide durable storage and replication of data between two zones in the same region.

Answer: 2,3,5

Explanation
Persistent disks are durable network storage devices that your instances can access like physical disks in a desktop or a server. The data on each persistent disk is distributed across several physical disks. Compute Engine manages the physical disks and the data distribution for you to ensure redundancy and optimal performance. Persistent disks are located independently from your virtual machine (VM) instances, so you can detach or move persistent disks to keep your data even after you delete your instances. Persistent disk performance scales automatically with size, so you can resize your existing persistent disks or add more persistent disks to an instance to meet your performance and storage space requirements.
https://cloud.google.com/compute/docs/disks

Question #:42  Which machine type family should you use for your in-memory database (for example SAP HANA)?

1.  Accelerator-optimized machines

2.  Memory-optimized machines

3.  Compute-optimized machines

4.  General-purpose machines

Answer: 2

Explanation
The memory-optimized machine family provides the most compute and memory resources of any Compute Engine machine family offering. They are ideal for workloads that require higher memory-to-vCPU ratios than the high-memory machine types in the general-purpose N1 machine series.
https://cloud.google.com/compute/docs/machine-types

Question #:43  Which command can you use to list all available gcloud existing named configurations in Cloud Shell?

1.  > gcloud config list

2.  > gcloud config configurations list

3.  > gcloud config list project

4.  > gcloud config configurations activate

Answer: 2

Explanation
https://cloud.google.com/sdk/gcloud/reference/config/configurations/list

Question #:44  Your team has developed a new version of application that is hosted on App Engine Standard environment, You want 2% of your users to switch to the new version and want to minimize complexity. What should you do?

1.  You should deploy a new version in the same application and split the traffic (98% to 2%).

2.  You should deploy a new version in the same application and use the --migrate option.

3.  You should create a new App Engine application in the same project. Deploy a new version in that application. Use the App Engine to split the traffic.

4.  You should create a new App Engine application in the same project. Deploy a new version in that application. Configure your network load balancer to send 2% of the traffic to that new application.

Answer: 1

Explanation
You can use traffic splitting to specify a percentage distribution of traffic across two or more of the versions within a service. Splitting traffic allows you to conduct A/B testing between your versions and provides control over the pace when rolling out features.
https://cloud.google.com/appengine/docs/standard/python/splitting-traffic

Question #:45  What is the recommended project migration checklist in GCP?

1.  1. Create a migration plan.

2.  2. Set organization policies.

3.  3. Perform the migration.

4.  1. Assign IAM roles.

5.  2. Set organization policies.

6.  3. Create a migration plan.

7.  4. Perform the migration.

8.  1. Create a migration plan.

9.  2. Address any special cases.

10.  3. Assign IAM roles.

11.  4. Set organization policies.

12.  5. Perform the migration.

13.  1. Create a migration plan.

14.  2. Perform the migration.

Answer: 12

Explanation
Checklist:
1. Create a migration plan.
2. Address any special cases.
3. Assign Identity and Access Management roles.
4. Set organization policies.
5. Perform the migration.
https://cloud.google.com/resource-manager/docs/project-migration-checklist

Question #:46  In GCP, your team has a development project and you want to deploy it in production environment. To do this, you want to create a new project with the same IAM roles. Using as few steps as possible, what should you do?

1.  You should get a list of all IAM roles in a development project and create it from scratch using Cloud SDK.

2.  You should use gcloud iam roles copy command to copy IAM roles.

3.  You should get a list of all IAM roles in a development project and create it from scratch using Google Cloud Console.

4.  You should get a list of all IAM roles in a development project and create it from scratch using Cloud Shell.

Answer: 2

Explanation
https://cloud.google.com/sdk/gcloud/reference/iam/roles/copy

Question #:47  Production Compute Engine workload is running in a small subnet, which can be expanded. The recent spike in traffic has caused problems, but there are no free IP addresses for Managed Instances Group to autoscale. What should you do?

1.  You should expand the subnet IP range.

2.  You should create a new subnet with a larger, non-overlapping range. Move all instances to the new subnet and remove the old subnet.

3.  You should create a new project and a new VPC. Share the new VPC with the existing project and configure all existing resources to use the new VPC.

4.  You should create a new subnet with a larger, overlapping range to automatically move all instances to the new subnet. Then, remove the old subnet.

Answer: 1

Explanation
You can expand the primary IPv4 range of an existing subnet by modifying its subnet mask, setting the prefix length to a smaller number. The proposed new primary IPv4 range of the subnet must follow the subnet rules.
https://cloud.google.com/vpc/docs/using-vpc#expand-subnet

Question #:48  Select all available autoscaling policies for Managed Instance Groups in GCP. (select 3)

1.  You can autoscale based on Cloud Monitoring metrics.

2.  You can autoscale based on average CPU utilization.

3.  You can autoscale based on HTTP load balancing serving capacity.

4.  There is no autoscaling policy for managed instance groups.

Answer: 1,2,3

Explanation
You can autoscale based on one or more of the following metrics that reflect the load of the instance group:
- Average CPU utilization.
- HTTP load balancing serving capacity, which can be based on either utilization or requests per second.
- Cloud Monitoring metrics.
https://cloud.google.com/compute/docs/autoscaler#autoscaling_policy

Question #:49  Select all true statements about IAM & Admin. (select 2)

1.  IAM basic roles apply to a particular GCP service in a project.

2.  IAM predefined roles apply across all GCP services in a project.

3.  IAM lets administrators authorize who can take action on specific resources.

4.  IAM & Admin is a global service.

Answer: 3,4

Explanation
https://cloud.google.com/iam/docs/understanding-roles

Question #:50  Your application is deployed in europe-central2 region using App Engine, but all users of your application are closest to us-west1 region. You want to minimize latency. What is the best way to change the App Engine region?

1.  You should use the gcloud app region set command and set the name of the new region.

2.  From the Google Cloud console, under the App Engine page, you should click edit and change the region.

3.  You should create a ticket to Google Cloud Support and request the change.

4.  You should create a new project and create an App Engine instance in us-west1 region.

Answer: 4

Explanation
App Engine is a fully managed, serverless platform for developing and hosting web applications at scale. You can choose from several popular languages, libraries, and frameworks to develop your apps, and then let App Engine take care of provisioning servers and scaling your app instances based on demand.
https://cloud.google.com/appengine/docs

Question #:51  Select all best practices for using IAM roles and permissions with folders. (select 3)

1.  Use the predefined roles for principle of least privilege rather than basic roles.

2.  Maximize usage of basic roles, such as owner, editor, and viewer.

3.  Use groups whenever possible to manage resources.

4.  Note that assigning a role to a user at the folder level will also grant them that role for every resource under that folder.

Answer: 1,3,4

Explanation
When assigning IAM roles and permissions for use with Folders, keep the following in mind:
- Use groups whenever possible to manage principals.
- Minimize usage of basic roles, such as owner, editor, and viewer. Instead, try to use the predefined roles for principle of least privilege.
- For folder-wide management, assign permissions at folder level and have projects inherit them automatically. For example, you could assign a department administrator group the Folder Admin role on the folder. Network administrators that need to have department-wide permissions can have the Network Admin role for the folder.
- Carefully consider what permissions might change before moving a resource out of a folder. Otherwise, you could risk breaking existing apps or workflows that require those permissions on that resource.
- Plan and test your resource hierarchy carefully before moving production projects under folders. One way to do this is to create a test folder under your Organization resource and creating a prototype of your intended hierarchy ahead of time.
- Granting a role to a user at the folder level will grant the user that role for every resource underneath that folder as well. For example, if you grant a user the Compute Admin role (roles/compute.admin) on a folder, that user will have full control of all Compute Engine resources in every project in that folder.
https://cloud.google.com/resource-manager/docs/access-control-folders#best-practices-folders-iam

Question #:52  Which command should you use to display all buckets in Cloud Shell?

1.  > gsutil cp

2.  > gsutil ls

3.  > gcloud ls

4.  > gsutil mv

Answer: 2

Explanation
https://cloud.google.com/storage/docs/gsutil/commands/ls

Question #:53  Select all true statements for Managed Instance Groups (MIGs). (select 2)

1.  You cannot set autoscaling with MIG.

2.  The automatic updater lets you safely deploy new versions of software to instances in your MIG.

3.  Preemptible instances cannot be used in MIG.

4.  You can crate zonal and regional MIG.

Answer: 2,4

Explanation
Managed instance groups (MIGs) let you operate apps on multiple identical VMs. You can make your workloads scalable and highly available by taking advantage of automated MIG services, including: autoscaling, autohealing, regional (multiple zone) deployment, and automatic updating.
https://cloud.google.com/compute/docs/instance-groups

Question #:54  A project with a single Virtual Private Cloud and a single subnetwork in the us-west1 region is given. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-central2 region. This new instance needs access to the application and you want to follow Google's best practices. What should you do?

1.  You should create a VPC and a subnetwork in europe-central2 region. Than, peer the 2 VPCs, and finally create a new instance in the new subnetwork and use the first instance's private address as the endpoint.

2.  You should create a VPC and a subnetwork in europe-central2 region. Than, expose the application with an internal load balancer, and finally create a new instance in the new subnetwork and use the load balancer's address as the endpoint.

3.  You should create a subnetwork in the same VPC, in europe-central2 region. Than, use Cloud VPN to connect the two subnetworks, and finally create a new instance in the new subnetwork and use the first instance's private address as the endpoint.

4.  You should create a subnetwork in the same VPC, in europe-central2 region. Than, create a new instance in the new subnetwork and use the first instance's private address as the endpoint.

Answer: 4

Explanation
https://cloud.google.com/vpc/docs/vpc#vpc_networks_and_subnets

Question #:55  As a developer you need to store structured and unstructured binary data (images, media files) of your applications using Google Cloud. Which service should you choose?

1.  BigQuery

2.  Cloud SQL

3.  Cloud Bigtable

4.  Cloud Datastore

5.  Cloud Storage

6.  Cloud Spanner

Answer: 5

Explanation
Cloud Storage is an object storage for companies of all sizes. Store any amount of data. Retrieve it as often as you’d like. Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. You can use Cloud Storage for a range of scenarios including serving website content, storing data for archival and disaster recovery, or distributing large data objects to users via direct download.
https://cloud.google.com/storage/docs/json_api/v1/objects

Question #:56  Your team wants to migrate 50 TB of Hadoop cluster from on-premises data center to GCP. Which GCP service should you use?

1.  Compute Engine

2.  BigQuery

3.  App Engine

4.  Dataproc

Answer: 4

Explanation
Dataproc is a managed Apache Spark and Apache Hadoop service that lets you take advantage of open source data tools for batch processing, querying, streaming, and machine learning. Dataproc automation helps you create clusters quickly, manage them easily, and save money by turning clusters off when you don't need them. With less time and money spent on administration, you can focus on your jobs and your data.
https://cloud.google.com/dataproc/docs/quickstarts/update-cluster-console
https://cloud.google.com/dataproc/docs/concepts/dataproc-hdfs

Question #:57  As a Cloud Engineer, you are setting up billing for your project and want to prevent excessive consumption of resources due to an error or malicious attack. What should you do?

1.  You should label all resources, regularly export the billing reports, and analyze them with BigQuery.

2.  You should set up a spending limit on the credit card used in your billing account.

3.  You should set up budgets and alerts in your project.

4.  You should set up quotas for the resources that your project will be using.

Answer: 4

Explanation
Compute Engine enforces quotas on resource usage for various reasons. For example, quotas help to protect the community of Google Cloud users by preventing unforeseen spikes in usage. Google Cloud also offers free trial quotas that provide limited access for projects to help you explore Google Cloud on a free trial basis.
https://cloud.google.com/compute/quotas

Question #:58  To run a script, you must connect via SSH to one of your Compute Engine instances. You already have gcloud authenticated, however you don't have an SSH key. What’s the easiest way to SSH to the instance?

1.  You should use the gcloud compute ssh command.

2.  You should create a key with the ssh-keygen command. Then use the gcloud compute ssh command.

3.  You should create a key with the ssh-keygen command. Upload the key to the instance. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.

4.  You need to run gcloud compute instances list to get the IP address of the instance, then use the ssh command.

Answer: 1

Explanation
https://cloud.google.com/sdk/gcloud/reference/alpha/compute/ssh

Question #:59  Select all possible ways to interact with GCP. (select 4)

1.  CloudFormation

2.  Cloud Platform Console

3.  REST-based API

4.  Cloud Console Mobile App

5.  Cloud Shell and Cloud SDK

Answer: 2,3,4,5

Explanation
https://cloud.google.com/docs/overview#ways_to_interact_with_the_services

Question #:60  Select all true statements about Local SSDs (Compute Engine). (select 2)

1.  Local SSDs are designed to offer lower IOPS than Standard Persistent Disk.

2.  Compute Engine doesn't encrypt your data when it is written to local SSD storage space.

3.  Local SSD storage isn't automatically replicated and all data on the local SSD might be lost if the instance terminates for any reason.

4.  The data that you store on a local SSD persists only until the instance is stopped or deleted.

Answer: 3,4

Explanation
Local SSDs are physically attached to the server that hosts your VM instance. Local SSDs have higher throughput and lower latency than standard persistent disks or SSD persistent disks. The data that you store on a local SSD persists only until the instance is stopped or deleted. Each local SSD is 375 GB in size, but you can attach a maximum of 24 local SSD partitions for a total of 9 TB per instance. Local SSDs are designed to offer very high IOPS and low latency. Unlike persistent disks, you must manage the striping on local SSDs yourself. Combine multiple local SSD partitions into a single logical volume to achieve the best local SSD performance per instance, or format local SSD partitions individually.
https://cloud.google.com/compute/docs/disks#localssds

Question #:61  Compute Engine instance has a single boot persistent disk (PD) that contains the operating system by default. Suppose your application requires additional storage space and you should add additional storage to your instance. Which storage options can you use with Compute Engine virtual machines to do this? (select 4)

1.  Cloud Storage bucket

2.  Local SSD

3.  Filestore

4.  Bigtable

5.  Zonal/Regional persistent disk

6.  BigQuery

Answer: 1,2,3,5

Explanation
Compute Engine offers several types of storage options for your instances. Each of the following storage options has unique price and performance characteristics:
- Zonal persistent disk: Efficient, reliable block storage.
- Regional persistent disk: Regional block storage replicated in two zones.
- Local SSD: High performance, transient, local block storage.
- Cloud Storage buckets: Affordable object storage.
- Filestore: High performance file storage for Google Cloud users.
https://cloud.google.com/compute/docs/disks

Question #:62  For a GCP project, you need to get a list of all enabled GCP APIs using the gcloud command line in the Cloud Shell. The project name is bigquery-course-257019. Which command should you use?

1.  > gcloud services bigquery-course-257019

2.  > gcloud services --project bigquery-course-257019

3.  > gcloud services list --project bigquery-course-257019

4.  > gcloud services list –available

Answer: 3

Explanation
https://cloud.google.com/sdk/gcloud/reference/services/list

Question #:63  Select all options you have to specify when creating virtual machine in GCP. (select 4)

1.  vCPU & RAM

2.  Operating system

3.  Startup script

4.  Location (region and zone)

5.  Labels

6.  Networking

Answer: 1,2,4,6

Explanation
Startup script and Labels are optional.
https://cloud.google.com/compute/docs/instances
https://cloud.google.com/compute/docs/instances/create-start-instance

Question #:64  Which of the following virtual machine instances may be terminated by Compute Engine without warning?

1.  A standard virtual machine.

2.  A preemptible virtual machine.

3.  A high-cpu virtual machine.

4.  A shared-core virtual machine.

Answer: 2

Explanation
Preemptible VM instances are available at much lower price - a 60-91% discount - compared to the price of standard VMs. However, Compute Engine might stop (preempt) these instances if it needs to reclaim the compute capacity for allocation to other VMs. Preemptible instances use excess Compute Engine capacity, so their availability varies with usage.
https://cloud.google.com/compute/docs/instances/preemptible

Question #:65  Select NoSQL solutions available on Google Cloud. (select 2)

1.  Cloud SQL

2.  Cloud Spanner

3.  Cloud Storage

4.  Cloud Datastore

5.  Bigtable

Answer: 4,5

Explanation
Cloud Datastore is a NoSQL document database built for automatic scaling, high performance, and ease of application development.
Cloud Bigtable is a sparsely populated table that can scale to billions of rows and thousands of columns, enabling you to store terabytes or even petabytes of data. A single value in each row is indexed; this value is known as the row key. Bigtable is ideal for storing very large amounts of single-keyed data with very low latency. It supports high read and write throughput at low latency, and it is an ideal data source for MapReduce operations.
Cloud Storage is an object storage for companies of all sizes. Store any amount of data. Retrieve it as often as you’d like. Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. You can use Cloud Storage for a range of scenarios including serving website content, storing data for archival and disaster recovery, or distributing large data objects to users via direct download.
Cloud SQL is a fully-managed database service that helps you set up, maintain, manage, and administer your relational databases on Google Cloud Platform. You can use Cloud SQL with MySQL, PostgreSQL, or SQL Server.
Cloud Spanner is a fully managed, mission-critical, relational database service that offers transactional consistency at global scale, automatic, synchronous replication for high availability, and support for two SQL dialects: Google Standard SQL (ANSI 2011 with extensions) and PostgreSQL.
https://cloud.google.com/datastore/docs/concepts/overview
https://cloud.google.com/bigtable/docs

Question #:66  An e-commerce company has petabytes of customer behavior data stored in on-premise data center. Due to storage limitations in on-premise data center, this company decided to migrate this data to GCP. The data must be available for your analysts, who have strong SQL background. How should you store the data to meet these requirements?

1.  You should import data into BigQuery.

2.  You should import data into Cloud Datastore.

3.  You should import flat files into Cloud Storage.

4.  You should import data into Cloud SQL.

Answer: 1

Explanation
BigQuery is Google Cloud's fully managed, petabyte-scale, and cost-effective analytics data warehouse that lets you run analytics over vast amounts of data in near real time. With BigQuery, there's no infrastructure to set up or manage, letting you focus on finding meaningful insights using standard SQL and taking advantage of flexible pricing models across on-demand and flat-rate options.
https://cloud.google.com/bigquery/docs/introduction

Question #:67  You have a virtual machine that is currently set up with 4 vCPUs and 16 GB of memory. Memory is running out. You want to upgrade your virtual machine so that it has 32 GB of memory. What should you do?

1.  You should rely on live migration to move the workload to a machine with more memory.

2.  You should stop the VM, increase the memory to 32 GB, and start the VM.

3.  You should stop the VM, change the machine type to e2-standard-4, and start the VM.

4.  You should use gcloud to add metadata to the VM. Set the key to required-memory-size and the value to 32 GB.

Answer: 2

Explanation
https://cloud.google.com/compute/docs/instances/changing-machine-type-of-stopped-instance

Question #:68  You are a Developer in Machine Learning startup company that stores CCTV footage videos in raw format in Cloud Storage bucket. Within the first two weeks, the footage is regularly processed to detect threats. How should you store the videos to minimize expenses? (choose the best option)

1.  You should use Standard storage class for the first two weeks, and then move videos to Persistent Disk.

2.  You should use Standard storage class for the first two weeks, and use lifecycle rules to transition to Nearline.

3.  You should use Standard storage class for the first 30 days, and use lifecycle rules to transition to Coldline.

4.  You should use Standard storage class for the first two weeks, and use lifecycle rules to transition to Coldline.

Answer: 4

Explanation
Standard Storage is best for data that is frequently accessed ("hot" data) and/or stored for only brief periods of time.
https://cloud.google.com/storage/docs/storage-classes#standard
https://cloud.google.com/storage/docs/lifecycle

Question #:69  Suppose you work for a company that has acquired a new entity. Your company and the new entity use the Google Cloud. Your manager wants to consolidate all projects under one organization. What can you advise?

1.  You need to create all projects from scratch in your organization.

2.  You cannot migrate projects from a new entity to your organization. It is not allowed.

3.  You should avoid migration, it's a bad practice.

4.  You can migrate all projects from new entity to your organization.

Answer: 4

Explanation
You may need to migrate projects between organizations due to acquisitions, regulatory requirements, and separation between business units, among other things.
https://cloud.google.com/resource-manager/docs/project-migration

Question #:70  Cloud Functions... (select 2)

1.  ...cannot be triggered by Cloud Storage bucket events (object creation, deletion).

2.  ...can be triggered by messages published to Pub/Sub topics.

3.  ...can be invoked with an HTTP request using the POST , PUT, GET, DELETE methods.

4.  ...cannot be directly invoked.

Answer: 2,3

Explanation
Cloud Functions is a serverless execution environment for building and connecting cloud services. With Cloud Functions you write simple, single-purpose functions that are attached to events emitted from your cloud infrastructure and services. Your function is triggered when an event being watched is fired. Your code executes in a fully managed environment. There is no need to provision any infrastructure or worry about managing any servers.
https://cloud.google.com/functions/docs/concepts/overview

Question #:71  You need to migrate your legacy on-premises applications to Google Cloud that are written in C++ and you want to use the serverless approach. What GCP compute services should you use?

1.  You should deploy the containerized version of the application in Google Kubernetes Engine.

2.  You should deploy the containerized version of the application in App Engine Flexible.

3.  You should deploy this application using a managed instance group.

4.  You should deploy the containerized version of the application in Cloud Run.

Answer: 4

Explanation
https://cloud.google.com/run/docs/concepts

Question #:72  Select true statement about objects in Cloud Storage.

1.  Objects are immutable, and new versions overwrite old unless you turn on versioning.

2.  Objects are immutable unless you turn on versioning.

3.  Objects can be edited in place.

4.  Objects are immutable, and versioned by default.

Answer: 1

Explanation
Cloud Storage is an object storage for companies of all sizes. Store any amount of data. Retrieve it as often as you’d like. Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. You can use Cloud Storage for a range of scenarios including serving website content, storing data for archival and disaster recovery, or distributing large data objects to users via direct download.
The Objects resource represents an object within Cloud Storage. Objects are pieces of data that you have uploaded to Cloud Storage. Every object in Cloud Storage resides in a bucket. The object is owned by its original uploader, who will always retain OWNER permission on it.
https://cloud.google.com/storage/docs/json_api/v1/objects

Question #:73  Suppose you work for a company and regulatory requirements require the separation of business units. Your company needs to create a new organization in GCP and your manager asked you how to do this with the least amount of work. What can you advise?

1.  You should avoid migration, it's a bad practice.

2.  You cannot migrate projects to the newly created organization. It is not allowed.

3.  You can migrate all projects to the newly created organization.

4.  You need to create all projects from scratch in the newly created organization.

Answer: 3

Explanation
You may need to migrate projects between organizations due to acquisitions, regulatory requirements, and separation between business units, among other things.
https://cloud.google.com/resource-manager/docs/project-migration

Question #:74  What does a cold starts in Cloud Function mean?

1.  It's a situation when a Cloud Function cannot be executed due to lack of resources.

2.  It's a situation when a new function instance is started, the runtime and code are loaded. Requests that involve starting function instances may be slower than requests hitting existing function instances.

3.  It's a situation when a Cloud Function cannot be executed due to an error.

4.  It's a situation when a Cloud Function cannot be executed due to a programming error.

5.  It's a situation when a Cloud Function service is unavailable.

Answer: 2

Explanation
Starting a new function instance involves loading the runtime and your code. Requests that include function instance startup (cold starts) can be slower than requests hitting existing function instances.
https://cloud.google.com/functions/docs/concepts/exec#cold_starts

Question #:75  As a Cloud Engineer you are migrating an application to GCP relies on overnight batch jobs that take approximately one hour. Which service should you use to do this with minimal cost?

1.  You should run the batch jobs in a GKE cluster.

2.  You should run the batch jobs in a preemptible compute engine instance.

3.  You should run the batch jobs in a virtual machine instance with GPUs.

4.  You should run the batch jobs in a normal virtual machine instance.

Answer: 2

Explanation
Preemptible VM instances are available at much lower price - a 60-91% discount - compared to the price of standard VMs. However, Compute Engine might stop (preempt) these instances if it needs to reclaim the compute capacity for allocation to other VMs. Preemptible instances use excess Compute Engine capacity, so their availability varies with usage.
https://cloud.google.com/compute/docs/instances/preemptible#what_is_a_preemptible_instance

Question #:76  Which of these ways provides access to the gcloud and kubectl commands? (select 2)

1.  Cloud Console mobile app

2.  Cloud Shell

3.  GCP Console

4.  Cloud SDK

Answer: 2,4

Explanation
Cloud Shell is an interactive shell environment for Google Cloud that makes it easy for you to learn and experiment with Google Cloud and manage your projects and resources from your web browser.
Cloud SDK is a Software Development Kit.
https://cloud.google.com/sdk/gcloud
https://cloud.google.com/shell/docs/quickstart
https://cloud.google.com/sdk/docs/quickstart

Question #:77  Select all true statements about preemptible instances. (select 2)

1.  Preemptible instances are are always available.

2.  You cannot create preemptible instances in a managed instance group.

3.  Compute Engine might stop preemptible instances at any time if it needs to reclaim the compute capacity for allocation to other VMs.

4.  Compute Engine always stops preemptible instances after they run for 24 hours.

Answer: 3,4

Explanation
Preemptible VM instances are available at much lower price—a 60-91% discount—compared to the price of standard VMs. However, Compute Engine might stop (preempt) these instances if it needs to reclaim the compute capacity for allocation to other VMs. Preemptible instances use excess Compute Engine capacity, so their availability varies with usage.
https://cloud.google.com/compute/docs/instances/preemptible

Question #:78  Select all true statements about containers. (select 3)

1.  Containers don't require any particular runtime binary.

2.  Containers abstract away irrelevant details of their environments.

3.  Containers are easy to move around.

4.  Containers start much faster than virtual machines and consume fewer resources, because each container doesn't have its own instance of the operating system.

Answer: 2,3,4

Explanation
Software containers are a convenient way to run your apps in multiple isolated user-space instances. You can run containers on Linux or Windows Server public VM images, or on a Container-Optimized OS image. Containers let your apps run with fewer dependencies on the host virtual machine (VM) and run independently from other containerized apps that you deploy to the same VM instance. These characteristics make containerized apps more portable, easier to deploy, and easier to maintain at scale.
https://cloud.google.com/compute/docs/containers

Question #:79  Select the correct order of IAM resource hierarchy.

1.  Organization -> Folders -> Resources -> Projects

2.  Organization -> Projects -> Folders -> Resources

3.  Organization -> Folders -> Projects -> Resources

4.  Folders -> Organization -> Projects -> Resources

Answer: 3

Explanation
IAM lets you set policies at the following levels of the resource hierarchy:
- Organization level. The organization resource represents your company. IAM roles granted at this level are inherited by all resources under the organization.
- Folder level. Folders can contain projects, other folders, or a combination of both. Roles granted at the highest folder level will be inherited by projects or other folders that are contained in that parent folder.
- Project level. Projects represent a trust boundary within your company. Services within the same project have a default level of trust. For example, App Engine instances can access Cloud Storage buckets within the same project. IAM roles granted at the project level are inherited by resources within that project.
- Resource level. In addition to the existing Cloud Storage and BigQuery ACL systems, additional resources such as Genomics Datasets, Pub/Sub topics, and Compute Engine instances support lower-level roles so that you can grant certain users permission to a single resource within a project.
https://cloud.google.com/iam/docs/resource-hierarchy-access-control

Question #:80  Why might a GCP customer use resources in several zones within a region?

1.  To cut down on expenses.

2.  To increase performance.

3.  To build a fault-tolerant application.

4.  To improve security.

Answer: 3

Explanation
A zone is a deployment area for Google Cloud resources within a region. Zones should be considered a single failure domain within a region. To deploy fault-tolerant applications with high availability and help protect against unexpected failures, you should deploy your applications across multiple zones in a region.
https://cloud.google.com/docs/geography-and-regions

Question #:81  When you have a lightweight event actions which computing service should you use?

1.  Cloud Functions

2.  Compute Engine

3.  Google Kubernetes Engine (GKE)

4.  App Engine Flexible Environment

5.  App Engine Standard Environment

Answer: 1

Explanation
Compute Engine is a computing and hosting service that lets you create and run virtual machines on Google infrastructure. Compute Engine offers scale, performance, and value that lets you easily launch large compute clusters on Google's infrastructure. There are no upfront investments, and you can run thousands of virtual CPUs on a system that offers quick, consistent performance.
Google Kubernetes Engine (GKE) provides a managed environment for deploying, managing, and scaling your containerized applications using Google infrastructure. The GKE environment consists of multiple machines (specifically, Compute Engine instances) grouped together to form a cluster.
Cloud Functions is a lightweight compute solution for developers to create single-purpose, stand-alone functions that respond to Cloud events without the need to manage a server or runtime environment.
The App Engine Standard Environment is based on container instances running on Google's infrastructure. Containers are preconfigured with one of several available runtimes. The standard environment makes it easy to build and deploy an application that runs reliably even under heavy load and with large amounts of data.
App Engine allows developers to focus on what they do best: writing code. Based on Compute Engine, the App Engine Flexible Environment automatically scales your app up and down while also balancing the load. You can customize these runtimes or provide your own runtime by supplying a custom Docker image or Dockerfile from the open source community.
https://cloud.google.com/functions/docs/how-to

Question #:82  An application processes a significant number of transactions that exceed the capabilities of a single virtual machine. As a Cloud Engineer, you want to spread transactions across multiple servers in real time and in the most cost-effective way. What should you do?

1.  You should send transactions to Pub/Sub and process them in virtual machines in a managed instance group.

2.  You should set up Cloud SQL with a memory cache for speed. On your multiple servers, poll for transactions that do not have the ‘processed’ key, and mark them ‘processed’ when done.

3.  You should send transactions to BigQuery. On the virtual machines, poll for transactions that don't have the ‘processed’ key, and mark them ‘processed’ when done.

4.  You should record transactions in Cloud Bigtable, and poll for new transactions from the VMs.

Answer: 1

Explanation
Pub/Sub is a scalable solution that can efficiently distribute a large number of tasks to multiple servers at low cost.
https://cloud.google.com/pubsub/docs/quickstart-console

Question #:83  Select all true statements about Cloud Functions. (select 3)

1.  Cloud Functions provide scalable pay-as-you-go Functions as a service (FaaS) to run code with zero server management.

2.  Cloud Functions cannot have a cold start.

3.  Cloud Functions doesn't automatically scale.

4.  Cloud Functions is a serverless execution environment for building and connecting cloud services.

5.  Cloud Functions must be stateless i.e. one function call should not rely on an in-memory state set by a previous call.

Answer: 1,4,5

Explanation
Cloud Functions is a serverless execution environment for building and connecting cloud services. With Cloud Functions you write simple, single-purpose functions that are attached to events emitted from your cloud infrastructure and services. Your function is triggered when an event being watched is fired. Your code executes in a fully managed environment. There is no need to provision any infrastructure or worry about managing any servers.
https://cloud.google.com/functions/docs/concepts/overview

Question #:84  What database engine can we use with Cloud SQL? (select 3)

1.  MongoDB

2.  Oracle DB

3.  PostgreSQL

4.  SQL Server

5.  MySQL

Answer: 3,4,5

Explanation
Cloud SQL is a fully-managed database service that helps you set up, maintain, manage, and administer your relational databases on Google Cloud Platform. You can use Cloud SQL with MySQL, PostgreSQL, or SQL Server.
https://cloud.google.com/sql/docs

Question #:85  You have application data that you access once a month, and data older than 5 years is no longer needed. What should you do to reduce storage costs? (select 2)

1.  You should store infrequently accessed data in a Nearline storage class.

2.  You should store infrequently accessed data in a Standard storage class.

3.  You should store infrequently accessed data in a multi-regional bucket.

4.  You should set an object lifecycle management policy to change the storage class to Archive for data older than 5 years.

5.  You should set an object lifecycle management policy to remove data older than 5 years.

Answer: 1,5

Explanation
To support common use cases like setting a Time to Live (TTL) for objects, retaining noncurrent versions of objects, or "downgrading" storage classes of objects to help manage costs, Cloud Storage offers the Object Lifecycle Management feature.
https://cloud.google.com/storage/docs/lifecycle
https://cloud.google.com/storage/docs/storage-classes#nearline

Question #:86  Embedding the service account's credentials in the application's source code is secure.

1.  True

2.  False

Answer: 2

Explanation
https://cloud.google.com/docs/authentication

Question #:87  Persistent disk performance is...

1.  ...based on the number of EC2 instance users.

2.  ...only based on the number of vCPUs that the instance has.

3.  ...based on the total persistent disk capacity attached to an instance and the number of vCPUs that the instance has.

4.  ...only based on the total persistent disk capacity attached to an instance.

Answer: 3

Explanation
Persistent disk performance scales automatically with size, so you can resize your existing persistent disks or add more persistent disks to an instance to meet your performance and storage space requirements. Persistent disk performance is predictable and scales linearly with provisioned capacity until the limits for an instance's provisioned vCPUs are reached.
https://cloud.google.com/compute/docs/disks#performance

Question #:88  If network traffic between one Compute Engine instance and another is suddenly denied, what is the most likely cause?

1.  The instances are on a low-bandwidth network.

2.  A firewall rule was deleted.

3.  The instances are on a default network with no additional firewall rules.

4.  You have exceeded your project's budget limit.

Answer: 2

Explanation
VPC firewall rules let you allow or deny connections to or from your virtual machine (VM) instances based on a configuration that you specify. Enabled VPC firewall rules are always enforced, protecting your instances regardless of their configuration and operating system, even if they have not started up.
https://cloud.google.com/vpc/docs/firewalls

Question #:89  In GCP billing is set up at the ___ level. (select correct option)

1.  folder

2.  user

3.  project

4.  organization

Answer: 3

Explanation
https://cloud.google.com/billing/docs/concepts

Question #:90  Choose fundamental characteristics of cloud computing. Select all that are correct (select 2).

1.  All resources are open-source-based.

2.  Customers pay only for what they use or reserve.

3.  Clients are obliged to conclude long-term contracts (at least 1 year).

4.  Customers can scale their resource use up and down.

Answer: 2,4

Explanation
https://cloud.google.com/docs

Question #:91  After deleting a GCP project, you can restore it within a certain period of time. How long is this period?

1.  3 months

2.  7 days

3.  30 days

4.  14 days

Answer: 3

Explanation
You can shut down projects using the Cloud Console or the projects.delete method in the API. A project must have a lifecycle state of ACTIVE to be shut down in this way. This method immediately marks a project to be deleted. A notification email will be sent to the user who initiated the delete operation and the Technical category contacts that are listed in Essential Contacts. If there's no contact in the Technical category, the fallback contact will not be notified. A project that is marked for deletion is not usable. If the project has a billing account associated with it, that association is broken, and isn't reinstated if the project delete operation is canceled. After 30 days, the project is fully deleted.
https://cloud.google.com/resource-manager/docs/creating-managing-projects#restoring_a_project

Question #:92  Suppose you run Spark jobs from time to time in your on-premises data center. You want to move to Google Cloud with your workload. Which service should you use?

1.  Bigtable

2.  Cloud Storage

3.  Cloud Pub/Sub

4.  BigQuery

5.  Dataproc

Answer: 5

Explanation
Dataproc is a managed Apache Spark and Apache Hadoop service that lets you take advantage of open source data tools for batch processing, querying, streaming, and machine learning. Dataproc automation helps you create clusters quickly, manage them easily, and save money by turning clusters off when you don't need them. With less time and money spent on administration, you can focus on your jobs and your data.
BigQuery is Google Cloud's fully managed, petabyte-scale, and cost-effective analytics data warehouse that lets you run analytics over vast amounts of data in near real time. With BigQuery, there's no infrastructure to set up or manage, letting you focus on finding meaningful insights using standard SQL and taking advantage of flexible pricing models across on-demand and flat-rate options.
Cloud Bigtable is a sparsely populated table that can scale to billions of rows and thousands of columns, enabling you to store terabytes or even petabytes of data. A single value in each row is indexed; this value is known as the row key. Bigtable is ideal for storing very large amounts of single-keyed data with very low latency. It supports high read and write throughput at low latency, and it is an ideal data source for MapReduce operations.
Cloud Storage is an object storage for companies of all sizes. Store any amount of data. Retrieve it as often as you’d like. Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. You can use Cloud Storage for a range of scenarios including serving website content, storing data for archival and disaster recovery, or distributing large data objects to users via direct download.
Cloud Pub/Sub is a fully-managed real-time messaging service that allows you to send and receive messages between independent applications. Pub/Sub allows services to communicate asynchronously, with latencies on the order of 100 milliseconds. Pub/Sub is used for streaming analytics and data integration pipelines to ingest and distribute data. It is equally effective as a messaging- oriented middleware for service integration or as a queue to parallelize tasks.
https://cloud.google.com/dataproc/docs/concepts/overview

Question #:93  Is it important to delete temporary files when you implement Cloud Function?

1.  Yes, temporary files sometimes persist between function invocations. This can lead to errors.

2.  It's not important.

3.  It's hard to say.

Answer: 1

Explanation
https://cloud.google.com/functions/docs/bestpractices/tips#always_delete_temporary_files

Question #:94  What kind of cloud computing model allows you to bind your application code with libraries that provide access to the cloud infrastructure for your application?

1.  Software as a Service (SaaS).

2.  Hybrid cloud.

3.  Platform as a Service (PaaS).

4.  Infrastructure as a Service (IaaS).

5.  Virtualized data centers.

Answer: 3

Explanation
IaaS (infrastructure as a service) is a computing model that offers resources on demand to businesses and individuals via the cloud.
Platform as a Service, also known as PaaS, is a type of cloud computing service model that offers a flexible, scalable cloud platform to develop, deploy, run, and manage apps. PaaS provides everything developers need for application development without the headaches of updating the operating system and development tools or maintaining hardware.
A hybrid cloud model provides a pragmatic solution. By using the public cloud, you can extend the capacity and capabilities of your IT without up-front capex investments. By adding one or more cloud deployments to your existing infrastructure, you not only preserve your existing investments, but also avoid committing yourself to a single IT vendor. Additionally, by using a hybrid strategy, you can modernize applications and processes incrementally as resources permit.
https://gcloud.devoteam.com/blog/iaas-paas-saas-whats-the-difference/

Question #:95  When you have general workloads which computing service should you use?

1.  Cloud Functions

2.  Compute Engine

3.  App Engine Flexible Environment

4.  App Engine Standard Environment

5.  Google Kubernetes Engine (GKE)

Answer: 2

Explanation
Compute Engine is a computing and hosting service that lets you create and run virtual machines on Google infrastructure. Compute Engine offers scale, performance, and value that lets you easily launch large compute clusters on Google's infrastructure. There are no upfront investments, and you can run thousands of virtual CPUs on a system that offers quick, consistent performance.
Google Kubernetes Engine (GKE) provides a managed environment for deploying, managing, and scaling your containerized applications using Google infrastructure. The GKE environment consists of multiple machines (specifically, Compute Engine instances) grouped together to form a cluster.
Cloud Functions is a lightweight compute solution for developers to create single-purpose, stand-alone functions that respond to Cloud events without the need to manage a server or runtime environment.
The App Engine Standard Environment is based on container instances running on Google's infrastructure. Containers are preconfigured with one of several available runtimes. The standard environment makes it easy to build and deploy an application that runs reliably even under heavy load and with large amounts of data.
App Engine allows developers to focus on what they do best: writing code. Based on Compute Engine, the App Engine Flexible Environment automatically scales your app up and down while also balancing the load. You can customize these runtimes or provide your own runtime by supplying a custom Docker image or Dockerfile from the open source community.
https://cloud.google.com/compute/docs/instances

Question #:96  As a Google Cloud consultant, you need to prepare a migration strategy for all of company's web applications using Google App Engine. However, this company wants to continue to use its own on-premise database. What do you recommend?

1.  Configuring the application using App Engine Flexible environment with Cloud VPN to connect to an on-premise database.

2.  Configuring the application using App Engine Flexible environment with Cloud Router to connect to an on-premise database.

3.  Configuring the application using App Engine Standard environment with Cloud Router to connect to an on-premise database.

4.  Configuring the application using App Engine Standard environment with Cloud VPN to connect to an on-premise database.

Answer: 1

Explanation
App Engine allows developers to focus on what they do best: writing code. Based on Compute Engine, the App Engine Flexible Eenvironment automatically scales your app up and down while also balancing the load. You can customize these runtimes or provide your own runtime by supplying a custom Docker image or Dockerfile from the open source community.
Cloud VPN securely extends your peer network to Google's network through an IPsec VPN tunnel. Traffic is encrypted and travels between the two networks over the public internet. Cloud VPN is useful for low-volume data connections.
https://cloud.google.com/appengine/docs/flexible

Question #:97  From your App Engine application you want to send and use Cloud Pub/Sub messages. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API and want to make sure your application can use Cloud Pub/Sub. What should you do?

1.  You should grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/ Sub.

2.  You should rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.

3.  You should enable the Cloud Pub/Sub API in the API Library on the GCP Console.

4.  You should use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.

Answer: 3

Explanation
https://cloud.google.com/endpoints/docs/openapi/enable-api

Question #:98  You are deploying an application to a Compute Engine VM in a Managed Instance Group. The application must be running all the time, but only one virtual machine instance should run per GCP project. What should you do?

1.  You should disable autoscaling and set the minimum number of instances to 1, and then set the maximum number of instances to 2.

2.  You should enable autoscaling and set the minimum number of instances to 1, and then set the maximum number of instances to 1.

3.  You should enable autoscaling and set the minimum number of instances to 1, and then set the maximum number of instances to 2.

4.  You should disable autoscaling and set the minimum number of instances to 1, and then set the maximum number of instances to 1.

Answer: 2

Explanation
Managed instance groups (MIGs) offer autoscaling capabilities that let you automatically add or delete virtual machine (VM) instances from a MIG based on increases or decreases in load. Autoscaling helps your apps gracefully handle increases in traffic and reduce costs when the need for resources is lower. You define the autoscaling policy and the autoscaler performs automatic scaling based on the measured load and the options you configure. Autoscaling works by adding more VMs to your MIG when there is more load (scaling out, sometimes referred to as scaling up), and deleting VMs when the need for VMs is lowered (scaling in or down).
https://cloud.google.com/compute/docs/autoscaler

Question #:99  Select all true statements about persistent disks in Compute Engine service. (select 3)

1.  Persistent disks are located independently from your virtual machine instances.

2.  You can detach or move persistent disks to keep your data even after you delete your instances.

3.  You cannot resize your existing persistent disks.

4.  You can add more persistent disks to an instance to meet your performance and storage space requirements.

Answer: 1,2,4

Explanation
Persistent disks are durable network storage devices that your instances can access like physical disks in a desktop or a server. The data on each persistent disk is distributed across several physical disks. Compute Engine manages the physical disks and the data distribution for you to ensure redundancy and optimal performance. Persistent disks are located independently from your virtual machine (VM) instances, so you can detach or move persistent disks to keep your data even after you delete your instances. Persistent disk performance scales automatically with size, so you can resize your existing persistent disks or add more persistent disks to an instance to meet your performance and storage space requirements.
https://cloud.google.com/compute/docs/disks#pdspecs

Question #:100  A mobile gaming company decided to migrate its analytics to BigQuery. Their analytics team needs access to perform queries against the data in BigQuery to improve user acquisition expenses for marketing campaigns. This analytics team members may change frequently. With Google best practices in mind, how do you grant them access?

1.  You should create a Cloud Identity account for each analyst. Then, grant BigQuery Data Viewer role to each account.

2.  You should create a Cloud Identity account for each analyst and add them all to a group. Then, grant BigQuery Data Viewer role to this group.

3.  You should create a Cloud Identity account for each analyst. Then, grant BigQuery Data Owner role to each account.

4.  You should create a Cloud Identity account for each analyst and add them all to a group. Then, grant BigQuery Data Owner role to this group.

Answer: 2

Explanation
BigQuery Data Viewer role
When applied to a table or view, this role provides permissions to:
- Read data and metadata from the table or view.
This role cannot be applied to individual models or routines. When applied to a dataset, this role provides permissions to:
- Read the dataset's metadata and list tables in the dataset.
- Read data and metadata from the dataset's tables.
When applied at the project or organization level, this role can also enumerate all datasets in the project. Additional roles, however, are necessary to allow the running of jobs.
Lowest-level resources where you can grant this role:
- Table
- View
https://cloud.google.com/identity/docs/set-up-cloud-identity-admin
https://cloud.google.com/bigquery/docs/access-control#bigquery

ABOUT THE AUTHOR

“Edcorner Learning” and have a significant number of students on Udemy with more than 90000+ Student and Rating of 4.1 or above.

Edcorner Learning is Part of Edcredibly.

Edcredibly is an online eLearning platform provides Courses on all trending technologies that maximizes learning outcomes and career opportunity for professionals and as well as students. Edcredibly have a significant number of 100000+ students on their own platform and have a Rating of 4.9 on Google Play Store – Edcredibly App.

Feel Free to check or join our courses on:

Edcredibly Website - https://www.edcredibly.com/

Edcredibly App –

https://play.google.com/store/apps/details?id=com.edcredibly.courses

Edcorner Learning Udemy - https://www.udemy.com/user/edcorner/

Do check our other eBooks available on Kindle Store.