All practice questions

An organization runs a web application deployed on a Google Kubernetes Engine (GKE) Standard cluster. During unexpected traffic surges, CPU utilization across application pods increases significantly, causing latency. The underlying node pool currently has sufficient unallocated CPU and memory capacity to host additional pods, but the application does not automatically scale up the number of pod replicas. Which solution should the DevOps team implement to dynamically scale the application pod count based on resource demand?

A cloud engineer needs to update a containerized workload deployed on a Google Kubernetes Engine (GKE) cluster. During the deployment image update, the new container version fails readiness checks, causing the rollout to stall. Arrange the operational steps in the correct chronological sequence to update the deployment, monitor the rollout, diagnose the failure, and revert the deployment to its previous healthy state.

To support a microservices backend, a devops team is deploying a new Cloud SQL for PostgreSQL database instance. Company governance rules require that the database use Private IP connectivity over an established Private Services Access connection within the VPC, while also maintaining high availability with regional redundancy. Which TWO options correctly specify the required `gcloud sql instances create` flags to meet these requirements?

Your organization runs batch processing workloads on Google Compute Engine that are fault-tolerant and can be paused or restarted without losing progress. You want to significantly reduce compute expenses by utilizing Google Cloud's unused capacity. Which VM provisioning option should you select?

A Cloud Engineer is tasked with deploying a secure Python microservice to Google Cloud Run using the gcloud CLI. The deployment must adhere to least-privilege security practices by using a custom execution service account, building and storing the container image in Artifact Registry, blocking public unauthenticated HTTP access, and granting invocation permissions to a specific caller service account. Arrange the following deployment and configuration steps in the correct chronological sequence from first to last.

A cloud engineer is responsible for managing a Google Cloud Storage bucket used for user-submitted document processing. To maintain efficient operations and avoid unexpected charges, the engineer must configure Object Lifecycle Management to meet two criteria: automatically remove incomplete upload attempts older than 7 days, and move previous object versions to a lower-cost tier after 30 days of becoming noncurrent. Which two lifecycle rules should be configured on the Cloud Storage bucket? (Select TWO options.)

To accommodate an upcoming peak workload, a cloud infrastructure engineer must release a performance-tuned container image `gcr.io/prod-project/event-handler:v2` as a new revision for an existing Cloud Run service named `event-handler`. The operational specification demands that the new container revision must maintain a minimum of 5 warm instances, process up to 250 concurrent requests per container instance, and initially receive exactly 15% of live production traffic, with the remaining 85% remaining assigned to the baseline revision `event-handler-v1`. Which command execution workflow correctly implements this deployment without inadvertently routing 100% of live traffic to the new revision upon deployment?

A logistics platform models monthly infrastructure costs in the Google Cloud Pricing Calculator for a fleet tracking service. The workload requires 5 N1 compute instances running continuously for 730 hours per month at a baseline rate of $0.20 per hour per instance. Google Cloud automatically applies a 30$ 0.05 per GB per month. Note that Persistent Disk pricing is not eligible for Sustained Use Discounts. What is the total estimated monthly cost, in dollars, for this workload?

An application engineer accidentally deleted critical database tables in a production Cloud SQL for MySQL instance named `prod-db`. You need to perform a Point-in-Time Recovery (PITR) to restore the database to its state exactly 30 minutes prior to the deletion into a new instance named `prod-db-restored`, verify the data, and switch application traffic. In what order should you execute these operational recovery steps?

Your organization is deploying a non-critical, fault-tolerant batch processing workload on Google Compute Engine and needs to grant operational management access to a team member. Which TWO actions should you take to satisfy cost optimization guidelines and enforce the principle of least privilege?

A lead cloud engineer needs to deploy a new production Cloud SQL for PostgreSQL database instance named `analytics-db` in the `us-east1` region using the `gcloud` CLI. Corporate security policies require that the database instance communicate exclusively over private IP addresses within a Virtual Private Cloud (VPC) named `production-vpc`, and that no public IPv4 address is assigned to the database instance. Which `gcloud` command correctly deploys the database instance to satisfy these security and network requirements?

An enterprise application utilizing Cloud SQL for PostgreSQL experienced data corruption due to an accidental table deletion at 14:15:00 UTC. Point-in-time recovery (PITR) via write-ahead logging is active on the instance `db-main`. You must restore the database to its exact state at 14:14:00 UTC into a new instance and cut over production traffic while retaining the original instance for post-mortem inspection.

In what order should you execute these operational recovery steps?

A healthcare analytics application hosted on Compute Engine requires a managed database service to store high-throughput, real-time IoT device telemetry metrics. The application processes high volumes of non-relational time-series data with unpredictable write spikes and requires sub-millisecond write latency without needing complex relational joins. Which Google Cloud database service should you recommend to meet these performance requirements with minimal operational overhead?

A data engineering team needs to provision a new Cloud SQL for PostgreSQL instance named `analytics-db` in the `us-central1` region. Security policy specifies that if a public IP is enabled on the instance, connectivity must be restricted exclusively to the corporate network IP range `198.51.100.0/24`. Furthermore, to avoid database outage caused by running out of disk space, automatic storage capacity expansion must be configured during deployment. Which `gcloud` command correctly deploys the database instance according to these requirements?

A financial operations analyst needs to create and manage spend budgets and budget threshold email alerts for a company's primary Google Cloud Billing account. To adhere to the principle of least privilege, the analyst must not be granted permissions to modify payment details, link or unlink projects, or manage billing account IAM roles. Which IAM role should be assigned to the analyst on the Cloud Billing account?

An online video processing platform is designing a Google Kubernetes Engine (GKE) cluster architecture to support two distinct workloads:

1. A real-time web API serving client requests where the operations team requires fully managed infrastructure with zero node provisioning or cluster node maintenance overhead.
2. A stateless frame-rendering batch processing pipeline that is fault-tolerant and requires significant cost reduction on compute resources.

Which TWO architectural choices should you combine to meet these workload requirements while minimizing operational complexity and compute expense?

A cloud engineer must migrate non-critical batch processing workloads on a Google Kubernetes Engine (GKE) Standard cluster named `prod-cluster` to a dedicated Spot VM node pool to lower compute expenses. The engineer must prevent general workloads from being scheduled onto the Spot nodes while ensuring existing batch pods transition smoothly without resource contention. In what chronological sequence should the engineer perform the following operational steps?

Your company is deploying a proprietary binary communication service hosted on Compute Engine managed instance groups across the us-central1 and europe-west1 regions. The service receives external client traffic over custom non-HTTP TCP connections on port 8443. Your security policy mandates that TLS/SSL encryption must be terminated at the Google Cloud load balancer edge before passing decrypted TCP traffic to backend virtual machines. Which Google Cloud load balancer type should you configure to meet these requirements?

A cloud engineer needs to ensure that a production Cloud SQL for MySQL instance can be restored to a specific point in time in the event of accidental data corruption. Which action should the engineer perform on the instance?

Your organization stores daily transaction log files in a Cloud Storage bucket configured with Uniform Bucket-Level Access. An automated compliance audit script accesses and inspects all log files daily during the first 60 days following their creation. Currently, an Object Lifecycle Management rule immediately transitions all uploaded objects to the Archive storage class upon creation, resulting in substantial retrieval fee charges during the daily compliance audits. You need to reconfigure the operational storage strategy to minimize overall storage and retrieval costs without compromising daily audit access or altering bucket access control policies. Which action should you take?