All practice questions

A Lead Site Reliability Engineer is automating the provisioning of a critical background processing VM named `worker-node-01` in the `us-central1-a` zone. The VM must connect to an existing subnet named `backend-subnet`, execute a local shell script located at `/local/config/bootstrap.sh` on startup, attach a custom service account named `[email protected]`, and strictly prevent any external IP address allocation. Which `gcloud` command correctly fulfills all these operational requirements?

A Cloud Engineer needs to manually export a Cloud SQL for PostgreSQL database to a Cloud Storage bucket for offline archiving using the Google Cloud CLI. Arrange the steps in the correct procedural order to successfully complete this export operation.

A company's automated data pipeline application requires access to upload, update, and delete log files within a specific Google Cloud Storage bucket. The application must not be allowed to modify bucket configuration settings, alter lifecycle rules, or manage bucket IAM permissions. Following Google Cloud security best practices for least privilege, which IAM role assignment should be configured for the application's service account?

Your organization requires a cloud engineer to export a production Cloud SQL for PostgreSQL instance to a Cloud Storage bucket for long-term compliance archiving. The destination bucket has restricted access, and the export operation must execute successfully without permission errors. What is the correct sequence of steps to perform and verify this database export using the gcloud CLI?

An organization is deploying a web application in Google Cloud that serves static media content to global internet users over HTTPS. The application architecture requires edge caching to reduce latency for static assets. Additionally, backend Compute Engine instances in a Virtual Private Cloud (VPC) must resolve internal database server names using a private domain namespace that is isolated from the public internet. Which TWO architectural components should you include in your network design? (Select TWO)

A mobile gaming studio is designing the backend architecture for a new multiplayer game. The backend must store user profiles, real-time game state session documents, and player inventory data. The workload requires single-digit millisecond latency for document queries, automatic multi-region synchronization, dynamic horizontal scaling to millions of concurrent users, and zero database server management overhead. Which Google Cloud storage or database option best satisfies these requirements?

A software engineer on your team is attempting to deploy a new stateless API service to an existing Google Kubernetes Engine (GKE) cluster named `api-cluster` located in region `us-central1`. When executing `kubectl apply -f deployment.yaml` on a newly provisioned workstation, `kubectl` fails with an error indicating that it cannot connect to a cluster API server at `localhost:8080`. Which action should the engineer take to resolve this issue and successfully deploy the workload?

A cloud operations team manages a stateless web application running on a Google Kubernetes Engine (GKE) Standard cluster. During peak usage, individual pods reach maximum CPU allocation, requiring additional pod replicas to handle incoming requests. Additionally, during sudden traffic spikes, newly created pods remain in a Pending state because the existing worker nodes lack available CPU capacity to schedule them. Which TWO actions should the team implement to establish dynamic autoscaling at both the workload layer and the cluster infrastructure layer? (Select TWO.)

Your team manages a high-throughput sensor application that stores real-time metrics in a Cloud Bigtable instance. During peak operational hours, read and write latencies spike significantly because average node CPU utilization exceeds 90%. You need to resolve this performance bottleneck during peak traffic while ensuring cost-efficient operations and minimal administrative overhead. Which two actions should you take? (Select TWO answers.)

A Cloud Engineer is configuring an automated continuous integration pipeline to deploy Compute Engine virtual machines into a target project named `prod-services-456` using Terraform. The deployment pipeline runs under a service account created in a separate central CI/CD GCP project. According to Google Cloud security and operational best practices, which approach should the engineer take to ensure Terraform authenticates securely and successfully provisions the infrastructure?

A security administrator needs to grant a data analyst permission to run SQL queries on a specific BigQuery dataset within a Google Cloud project, while adhering strictly to the principle of least privilege. Which of the following IAM role assignments should the administrator configure? (Select TWO.)

A solutions architect is automating the deployment of a managed NoSQL database service on Google Cloud to handle low-latency, high-throughput time-series writes from millions of IoT telemetry sensors. The application requires consistent sub-10ms performance and high availability. The database instance named `telemetry-db` must be deployed using the Google Cloud CLI with an initial cluster named `telemetry-c1` in the `us-central1-a` zone with 3 nodes. Which `gcloud` command correctly provisions this instance?

A system administrator manages a Cloud Storage bucket containing application log files. The logs are frequently inspected during the first 30 days after creation, but are accessed only occasionally after 30 days. To automatically reduce storage costs without deleting any data or manually moving files, which action should you perform?

A bioinformatics research laboratory is architecting a Google Kubernetes Engine (GKE) cluster for two main workloads:

1. A continuous API service that requires custom sysctl kernel parameters for specialized network socket tuning.
2. A large-scale genomic sequencing batch job that is stateless, highly fault-tolerant, and needs to run at the lowest possible cost.

Which TWO cluster architectural decisions should the team make to satisfy all requirements? (Select TWO.)

An organization runs an enterprise e-commerce application on a Google Kubernetes Engine (GKE) Standard cluster. During sudden promotional events, several newly created pods remain indefinitely in a Pending state because existing nodes lack unallocated CPU capacity, yet the cluster fails to provision additional Compute Engine nodes. Concurrently, non-critical background batch processing workloads are consuming compute capacity on nodes reserved for core stateful API services. Which TWO management actions should a cloud engineer perform to resolve the node scaling failure and isolate the workloads? (Select TWO.)

A cloud administrator needs to configure access for two team members working in a Google Cloud project. An compliance auditor requires read-only access to view IAM policy bindings across all resources in the project. Additionally, a security engineer needs to create and manage custom IAM roles within the project. Following Google's recommended practices for least privilege, which TWO IAM roles should the administrator grant? (Select TWO.)

An enterprise security compliance policy requires an external auditing team to be granted read-only access to log files in a specific Cloud Storage bucket and query access to a specific BigQuery dataset in a production project. To strictly adhere to the Principle of Least Privilege, which of the following IAM role configurations should you apply? (Select TWO answers.)

An enterprise IoT telemetry system writes high-frequency streaming data into a single-cluster Cloud Bigtable instance configured with SSD storage. During scheduled analytical batch operations, heavy read queries degrade cluster write performance, leading to high write latencies and timeout errors for incoming telemetry streams. Operational requirements dictate isolating the analytical read workload from the real-time write workload while maintaining seamless workload routing without exporting data out of Cloud Bigtable or changing the application's underlying database model. Which action should you take?

A lead engineer at an online education company is using the Google Cloud Pricing Calculator to model monthly infrastructure costs for a video analytics platform. The architecture requires compute resources for two distinct workloads: a core service that runs continuously 24 hours a day, 7 days a week, and a secondary stateless batch processing service that generates video thumbnails and can tolerate unexpected instance terminations. Which configuration strategy in the Google Cloud Pricing Calculator provides the most accurate and cost-effective monthly estimate for these compute workloads?

A cloud engineer must provision a Compute Engine virtual machine instance that automatically retrieves and executes a startup script stored in a private Cloud Storage bucket (`gs://corp-scripts-prod/init.sh`). The environment mandates strict adherence to the principle of least privilege using custom identities. Arrange the operational steps in the correct sequential order to properly configure permissions, deploy the VM instance via `gcloud`, and validate deployment success.