All practice questions

A media streaming company is using the Google Cloud Pricing Calculator to estimate monthly compute expenses for a video transcribing pipeline. The system requires 10 Compute Engine virtual machines running 24 hours a day, 7 days a week for steady-state ingestion, alongside a temporary pool of 30 virtual machines that run for only 3 hours each night to process video rendering jobs. Which configuration approach in the Google Cloud Pricing Calculator provides the most accurate and cost-effective monthly cost estimate for this workload?

An organization needs to set up a continuous export of detailed Cloud Billing data to BigQuery to enable custom SQL auditing across all linked projects. Which configuration steps and permissions are required to achieve this continuous export? (Select TWO)

A cloud security administrator needs to grant an external auditing team access to view the configuration and metadata of Compute Engine virtual machine instances within a specific Google Cloud project. The auditors must not be able to start, stop, modify, or delete any instances, nor should they have access to view resources in other Google Cloud services within the project. Following Google's recommended best practice of applying the principle of least privilege, which IAM role should be assigned to the auditing team on the project?

An infrastructure administrator needs to optimize a Google Kubernetes Engine (GKE) Standard cluster to handle fluctuating workload demands while maintaining application availability during node upgrades. The workload requires custom node OS kernel parameters. Which TWO configurations must the administrator implement? (Select TWO)

A digital publishing platform requires a fully managed GCP database service to store user profile documents, user session state, and content metadata. The workload demands flexible schema support, automatic multi-region replication with strong consistency, sub-second latency for document lookups, and zero database server management overhead. Which Google Cloud service should the cloud engineer select to meet these requirements?

A cloud engineer must deploy a new relational database instance named `orders-db` for an e-commerce order management platform in the `us-central1` region. The database requires ACID transactional consistency, high availability across multiple zones within the region, automated daily backups, and strict security compliance prohibiting public IP addresses. The database must connect directly to an existing Virtual Private Cloud (VPC) named `production-vpc`. Which `gcloud` command should the engineer execute to provision this database instance?

An administrator needs to gather OS-level telemetry, such as memory utilization and disk space usage, from a Compute Engine virtual machine instance and export it to Google Cloud Observability. Which software agent should the administrator install on the VM instance?

A cloud engineer manages a high-throughput processing pipeline deployed on a Google Kubernetes Engine (GKE) Standard cluster. The workload manifests define Pods with heavy CPU resource requests ($2000\text{m}$ per Pod). During peak loads, the Horizontal Pod Autoscaler (HPA) scales the deployment replica count up, causing multiple newly created Pods to remain in the `Pending` state with the event reason `FailedScheduling`. Inspection reveals that the existing node pool has reached its maximum configured size under Cluster Autoscaler, and no existing nodes have sufficient unallocated CPU to schedule the pending Pods. The engineer wants GKE to automatically provision entirely new node pools with appropriate machine types and scale limits when existing node pools cannot accommodate Pod resource requests. Which command should the engineer execute to meet this operational requirement?

An infrastructure team is deploying a containerized microservice to Google Cloud Run in the `us-central1` region using the `gcloud` CLI. The container is configured internally to listen on port `3000` rather than the default port `8080`, and the service must be restricted so that unauthenticated public requests are rejected. Which TWO flags must be included in the `gcloud run deploy` command to satisfy these operational requirements? (Select TWO.)

An online learning platform needs to serve static video assets and course documents to internet users globally over HTTPS. To minimize latency and reduce origin server load, static assets must be cached at the Google network edge, and SSL/TLS termination must occur at the global edge. Which TWO Google Cloud networking components or features should you include in your architecture plan?

You need to export a Cloud SQL for MySQL database instance to a Cloud Storage bucket for offline archiving using Google Cloud CLI tools. In what order should you execute the steps to complete this operation?

A cloud administrator creates a new regional Google Kubernetes Engine (GKE) cluster named `analytics-prod-cluster` in the `us-east1` region. The administrator opens a local terminal on a workstation where the `gcloud` CLI is installed and authenticated with proper Cloud IAM permissions. However, when executing `kubectl get nodes`, the terminal returns an error stating that the cluster context cannot be found. Which command should the administrator execute to populate the local `kubeconfig` file with the cluster credentials?

A cloud engineer wants to ensure that an existing Cloud Run service named `payments-api` always keeps a minimum of 3 container instances ready to serve incoming traffic to avoid cold start latencies. Which `gcloud` command should the engineer execute?

A cloud engineer is managing a production Google Kubernetes Engine (GKE) Standard cluster that hosts both a critical payment microservice and a batch data processing job. The batch data processing job should only execute on dedicated Spot VM node pools to reduce operational costs, while the payment microservice must remain strictly isolated on on-demand Compute Engine nodes to prevent unexpected termination. Which TWO configuration steps must the engineer take to achieve this workload isolation? Select two.

A healthtech enterprise is modeling monthly infrastructure expenses in the Google Cloud Pricing Calculator for a healthcare analytics solution. The architecture consists of Compute Engine VMs running continuous data processing jobs, Cloud Storage buckets for short-term and long-term log retention, and network egress to an external auditor. Which of the following statements accurately describe how cost estimation principles and discount mechanisms apply when configuring this estimate in the Pricing Calculator? (Select TWO.)

An e-commerce company is planning its Google Kubernetes Engine (GKE) cluster architecture to support two distinct workloads: a core inventory management microservice and a background batch analytics pipeline. The team needs to minimize operational overhead for cluster and node infrastructure administration for the microservices, while optimizing compute costs for the fault-tolerant batch pipeline which can tolerate node preemptions. Which TWO architectural decisions should the team select to meet these requirements?

An e-commerce platform relies on a Compute Engine Managed Instance Group (MIG) to serve dynamic web traffic. During high-volume flash sales, incoming load surges rapidly. The application binary deployed on each virtual machine requires approximately 4 minutes to load configuration files and warm up local caches before it can successfully process requests. However, the MIG autoscaler currently evaluates metrics continuously and provisions additional virtual machines every 60 seconds, creating significantly more instances than required and causing regional CPU quota exhaustion errors. Which operational adjustment should you make to stabilize the autoscaling behavior?

A cloud operations team needs to establish automated cost governance for a Google Cloud project. They want email notifications sent to project billing admins when spending hits $80\%$ of the monthly budget. Additionally, when spending reaches $100\%$, they require a custom Cloud Function to automatically execute and disable non-essential resources. Which setup represents the Google Cloud recommended approach?

Your organization is deploying a public web application hosted on a Compute Engine instance group. You have configured a Global External Application Load Balancer and created a Google-managed SSL certificate for your custom domain `app.example.com`. However, after deploying the target HTTPS proxy and forwarding rule, the SSL certificate status remains in `PROVISIONING` and clients cannot establish secure HTTPS connections. What configuration step must be completed to finalize domain ownership verification and successfully provision the managed SSL certificate?

An enterprise security policy requires that a new high-throughput Cloud SQL for SQL Server database instance named `sql-fin-db` be deployed in the `us-east1` region. The database must be completely isolated from the public internet by disabling public IP address assignment and enabling Private IP connectivity over an existing VPC network named `corp-vpc`. Which `gcloud` command correctly provisions this managed database instance in full compliance with these security rules?