Question 1

You need to update a deployment in Deployment Manager without any resource downtime in the deployment. Which command should you use?

Accepted Answer

The `gcloud deployment-manager deployments update` command is used to update an existing deployment with a new configuration, aiming to minimize downtime by applying changes in a controlled manner.

Question 2

You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us-central region. Now you want the application to be served from the asia-northeast1 region. What should you do?

Accepted Answer

The answer of You created a Google Cloud Platform project...

Question 3

You are deploying an application to a Compute Engine VM in a managed instance group. The application must be running at all times, but only a single instance of the VM should run per GCP project. How should you configure the instance group?

Accepted Answer

Setting autoscaling to On with both minimum and maximum number of instances to 1 ensures that only one instance is running at all times, and autoscaling will maintain this configuration automatically.

Question 4

You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?

Accepted Answer

Reserving the IP 10.0.3.21 as a static internal IP address ensures that the licensing server can be reached at this specific IP without changing the application configuration.

Question 5

You want to configure 10 Compute Engine instances for availability when maintenance occurs. Your requirements state that these instances should attempt to automatically restart if they crash. Also, the instances should be highly available including during system maintenance. What should you do?

Accepted Answer

The answer of You want to configure 10 Compute Engine...

Question 6

Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?

Accepted Answer

Using Google Cloud Directory Sync (GCDS) allows you to synchronize user accounts from Active Directory to Cloud Identity, maintaining Active Directory as the source of truth while having full control over Google accounts.

Question 7

Your company set up a complex organizational structure on Google Could Platform. The structure includes hundreds of folders and projects. Only a few team members should be able to view the hierarchical structure. You need to assign minimum permissions to these team members and you want to follow Google-recommended practices. What should you do?

Accepted Answer

The answer of Your company set up a complex organizational...

Question 8

You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API. You want to make sure your application can use Cloud Pub/Sub. What should you do?

Accepted Answer

You need to manually enable the Cloud Pub/Sub API in the API Library on the GCP Console to ensure your application can use it.

Question 9

You have successfully created a development environment in a project for an application. This application uses Compute Engine and Cloud SQL. Now, you need to create a production environment for this application. The security team has forbidden the existence of network routes between these 2 environments, and asks you to follow Google-recommended practices. What should you do?

Accepted Answer

The answer of You have successfully created a development environment...

Question 10

You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps. What should you do?

Accepted Answer

The answer of You created an instance of SQL Server...

Question 11

You want to verify the IAM users and roles assigned within a GCP project named my-project . What should you do?

Accepted Answer

The answer of You want to verify the IAM users...

Question 12

Your organization has a dedicated person who creates and manages all service accounts for Google Cloud projects. You need to assign this person the minimum role for projects. What should you do?

Accepted Answer

The roles/iam.serviceAccountUser role grants the minimum permissions needed to create and manage service accounts.

Question 13

Several employees at your company have been creating projects with Cloud Platform and paying for it with their personal credit cards, which the company reimburses. The company wants to centralize all these projects under a single, new billing account. What should you do?

Accepted Answer

Create a new billing account in the Google Cloud Platform Console and set up a payment method to centralize billing for all projects.

Question 14

You are building a pipeline to process time-series data. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?

Accepted Answer

The answer of You are building a pipeline to process...

Question 15

Your company implemented BigQuery as an enterprise data warehouse. Users from multiple business units run queries on this data warehouse. However, you notice that query costs for BigQuery are very high, and you need to control costs. Which two methods should you use? (Choose two.)

Accepted Answer

Applying user- or project-level custom query quotas can help control costs by limiting the amount of data users can query. Changing from on-demand to flat-rate pricing can also help manage costs by providing predictable billing and potentially reducing costs with the appropriate allocation of slots.

Question 16

Your company uses BigQuery for data warehousing. Over time, many different business units in your company have created 1000+ datasets across hundreds of projects. Your CIO wants you to examine all datasets to find tables that contain an employee_ssn column. You want to minimize effort in performing this task. What should you do?

Accepted Answer

The answer of Your company uses BigQuery for data warehousing....

Question 17

Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?

Accepted Answer

The answer of Every employee of your company has a...

Question 18

You want to select and configure a cost-effective solution for relational data on Google Cloud Platform. You are working with a small set of operational data in one geographic location. You need to support point-in-time recovery. What should you do?

Accepted Answer

Cloud SQL with binary logging enables point-in-time recovery by creating backups of your database at regular intervals.

Question 19

You are creating a Google Kubernetes Engine (GKE) cluster with a cluster autoscaler feature enabled. You need to make sure that each node of the cluster will run a monitoring pod that sends container metrics to a third-party monitoring solution. What should you do?

Accepted Answer

A DaemonSet ensures that all (or some) nodes run a copy of a pod, which is ideal for running monitoring pods on each node in a cluster.

Question 20

You have a development project with appropriate IAM roles defined. You are creating a production project and want to have the same IAM roles on the new project, using the fewest possible steps. What should you do?

Accepted Answer

The answer of You have a development project with appropriate...

Exam 8: GSuite