All practice questions

An enterprise DevOps team needs to set up a new environment within their Google Cloud resource hierarchy. The team requires authorization to create new projects exclusively under a designated folder named 'Mobile-Backend' and link those projects to the company's central Billing Account. Following the principle of least privilege, which TWO IAM roles must be granted to the DevOps team principal?

A financial technology company is designing the Google Cloud Compute Engine resource strategy for two distinct backend services:
1. A fault-tolerant, stateless batch risk analytics service that processes asynchronous job queues.
2. A mission-critical relational database service requiring continuous 24/7 availability with predictable capacity.

Which of the following compute provisioning strategies should the cloud engineer implement? (Select TWO.)

An enterprise SaaS provider is evaluating Compute Engine resource configurations for two new background processing workloads:

1. Workload Alpha: An event-driven image rendering worker pool that processes decoupled queue messages. Each task takes 3 to 10 seconds to process, operates statelessly, and can tolerate immediate instance termination without data loss.
2. Workload Beta: A stateful, high-throughput in-memory database cache node that requires 128 GB of RAM, runs continuously 24/7, and cannot tolerate unexpected interruptions.

Which TWO cost-effective and architecturally suitable provisioning strategies should the lead cloud architect select for these Compute Engine workloads? (Select TWO.)

An enterprise logistics company runs a continuous 24/7 real-time vehicle tracking pipeline on Google Cloud. The application requires a precise capacity ratio of 3 vCPUs to 24 GB of memory to process telemetry data streams without memory throttling. The workload is strictly non-fault-tolerant and cannot tolerate instance terminations or preemption. Which Compute Engine resource planning strategy provides the most cost-effective configuration while satisfying all performance and operational constraints?

A media publishing platform is migrating two backend workloads to Google Cloud with distinct operational and cost constraints:

1. Workload 1: A stateless HTTP microservice packaged as a container image that experiences unpredictable web traffic throughout the day. It requires automatic scaling down to zero instances when idle and zero operational maintenance for virtual machine instances or Kubernetes node pools.
2. Workload 2: A nightly batch processing job that runs for several hours. The pipeline is fully fault-tolerant and saves checkpoint progress to Cloud Storage every 5 minutes. The team's primary priority is to minimize compute costs for this batch execution.

Which TWO compute platform strategies should the Cloud Engineer recommend to satisfy these requirements? (Select TWO choices.)

A cloud engineer is tasked with configuring billing for a newly provisioned Google Cloud project (`staging-microservices-prod`). The project must be linked to an existing corporate billing account (`01A2B3-4C5D6E-7F8901`). Adhering strictly to Google Cloud least-privilege security principles, which TWO IAM roles must be granted to the cloud engineer to perform this linking operation? (Select TWO.)

A system architect is planning to deploy an enterprise database workload on Google Compute Engine that requires high RAM capacity per core and must maintain 100% uptime without any sudden terminations. Which Compute Engine machine family and instance provisioning model should the cloud engineer select?

You need to grant a developer access to view and download objects stored within a specific Cloud Storage bucket in your project. Following Google Cloud best practices and the principle of least privilege, which IAM role should you assign?

An engineer is using the Google Cloud Pricing Calculator to estimate monthly infrastructure costs for a fault-tolerant batch processing workload on Compute Engine that can tolerate sudden instance interruptions. Which configuration choice in the pricing calculator provides the most cost-effective option for these compute instances?

A cloud engineer is utilizing the Google Cloud Pricing Calculator to model monthly cost projections for a complex multi-component architecture migration. The proposed workload includes:

1. Baseline 24/7 web server instances running continuously for a planned 3-year period.
2. Primary stateful PostgreSQL database instances requiring high availability and persistent storage.
3. Stateless batch processing tasks that can be safely interrupted and rescheduled.
4. Compliance log archives stored long-term with rare but mandatory immediate-access emergency retrieval requirements.

Which of the following configuration practices in the pricing calculator will yield an accurate, cost-optimized estimate while avoiding invalid pricing assumptions or operational misconfigurations? (Select TWO choices.)

A financial technology company needs to store historical customer transaction receipts in Google Cloud Storage for 5 years to meet regulatory compliance requirements. These receipts are expected to be accessed less than once per year, but when requested for an audit, they must be retrieved immediately within milliseconds. Which Cloud Storage class provides the lowest storage cost for this access pattern?

An Cloud Engineer needs to set up daily Cloud Billing export to BigQuery for long-term spend analysis. Sequence the following steps in the correct order to successfully configure the export.

A digital media publishing company is planning the Google Cloud compute architecture for two newly developed backend workloads:

1. Video Transcoding Batch Pipeline: A fault-tolerant, stateless batch job that processes uploaded media files, checkpoints progress to Cloud Storage, and can handle unexpected server terminations without data loss.
2. User Comments API: A stateless containerized microservice that handles HTTP REST requests for article commentary, experiences unpredictable traffic spikes during peak news events, requires minimal operational management overhead, and must scale down to zero instances when idle to conserve costs.

Which TWO compute architecture strategies should you recommend to meet these functional and operational requirements while minimizing costs?

A financial technology company is designing a container architecture on Google Cloud for two distinct services. The first service is a stateless public API frontend that requires minimal operational overhead, automated node security patching, and no infrastructure management. The second service is a fault-tolerant batch processing engine that executes asynchronous calculations, where workload interruptions are acceptable in exchange for maximum cost savings. Which TWO architectural decisions should the cloud engineering team implement to satisfy these requirements?

An organization is planning its Google Cloud infrastructure for two distinct applications. Application 1 is a high-throughput video transcode batch processing pipeline that processes stateless chunks in parallel and can handle unexpected instance terminations without data loss. Application 2 is a core web service operating continuously 24 hours a day, 7 days a week, with predictable baseline resource requirements. Which TWO machine planning and pricing strategies should you implement to optimize overall compute costs while maintaining performance requirements?

A fintech enterprise is designing a storage architecture on Google Cloud for financial audit logs. The access pattern and compliance requirements are defined as follows:

• Log objects are continuously uploaded and accessed heavily by real-time fraud detection systems during their first 30 days.
• After 30 days, access drops to near-zero, but data must be retained for 7 years ($2,555$ days) to comply with legal regulations.
• In the rare event of a regulatory audit, objects must remain retrievable in milliseconds without multi-hour vault restoration delays.
• The architecture must guarantee immutability against deletion or modification during the compliance window while minimizing total cost of ownership (storage, retrieval fees, and early transition penalties).

Which TWO configuration decisions should the cloud engineer implement to satisfy these requirements?

A financial analytics team is deploying batch processing workloads to a project named `hpc-simulations-prod`. The Compute Engine API is already enabled for the project, but automated deployment scripts fail when attempting to provision additional virtual machines, returning an error stating that regional vCPU limits have been exceeded. Which action should the cloud administrator take to resolve this issue?

An organization is establishing access controls for an automated infrastructure deployment pipeline and a finance audit team. A service account named `[email protected]` requires permissions to fully manage Compute Engine virtual machine instances only within the target project `prod-core`. Simultaneously, a compliance auditor needs read-only access to inspect spending trends and invoice data on the Billing Account associated with `prod-core`, without permission to modify billing configurations or manage project resources. Which IAM role configurations adhere to Google Cloud best practices and the principle of least privilege? (Select TWO.)

A FinOps engineer is designing a centralized cost governance architecture for an enterprise Google Cloud environment. The organization requires two capabilities: first, streaming daily granular cost logs into BigQuery for custom SQL analytics; second, triggering an automated Cloud Run microservice to modify resource deployment parameters whenever project expenditure exceeds 80% of the monthly budget allocation. Which set of IAM permissions and service integration configurations strictly aligns with Google Cloud recommended practices to accomplish this?

An enterprise cloud operations team manages a Google Cloud resource hierarchy containing an Organization node, top-level environment Folders, and team-specific sub-folders. A security engineer needs to grant a lead analyst the ability to manage compute resources across all current and future projects located inside the 'Analytics-Dev' sub-folder, while following Google-recommended security practices and avoiding unnecessary operational maintenance. What should the security engineer do?