Examkin

Soru

Zorluk: Çok zorDeploying and Configuring Cloud Storage Buckets and Objects

A lead cloud engineer is deploying a new Google Cloud Storage bucket to archive monthly financial transaction audit records in the europe-west3 region. The security and operational requirements specify that:
1. Objects uploaded to the bucket must default to the Nearline storage class.
2. Access control must be enforced strictly via IAM policies by disabling per-object Access Control Lists (ACLs).
3. Any public access to objects within the bucket must be prevented at the bucket level.

Which command should the engineer execute to deploy this bucket according to Google Cloud recommended best practices?

  1. gcloud storage buckets create gs://fin-audit-archive-euwest3 --location=europe-west3 --default-storage-class=nearline --uniform-bucket-level-access --public-access-preventionCevap
  2. B
    gcloud storage buckets create gs://fin-audit-archive-euwest3 --region=europe-west3 --storage-class=nearline --no-assign-acls --block-public-access
  3. C
    gcloud storage buckets create gs://fin-audit-archive-euwest3 --location=europe-west3 --default-storage-class=coldline --uniform-bucket-level-access --public-access-prevention
  4. D
    gsutil mb -c nearline -l europe-west3 -b on -a public-read-off gs://fin-audit-archive-euwest3

Cevap

The command 'gcloud storage buckets create gs://fin-audit-archive-euwest3 --location=europe-west3 --default-storage-class=nearline --uniform-bucket-level-access --public-access-prevention' fulfills all requirements using modern Google Cloud CLI syntax.
The correct option utilizes the standard 'gcloud storage buckets create' command with proper flag parameters: '--location=europe-west3' sets the bucket location, '--default-storage-class=nearline' sets the default storage class for new objects, '--uniform-bucket-level-access' enforces IAM-only permissions by disabling per-object ACLs, and '--public-access-prevention' prevents public data exposure at the bucket level.

Adım Adım Çözüm

1
Identify the recommended Google Cloud CLI tool for Cloud Storage management.
Google Cloud recommends using 'gcloud storage buckets create' over legacy 'gsutil mb'.
The gcloud storage CLI provides optimized performance and standardized flag formatting across GCP services.
2
Map operational requirements to the correct gcloud storage flags.
Location: '--location=europe-west3'; Storage Class: '--default-storage-class=nearline'; Disable ACLs: '--uniform-bucket-level-access'; Block Internet Public Access: '--public-access-prevention'.
Uniform bucket-level access disables legacy object ACLs in favor of IAM, and public access prevention enforces bucket-wide restriction on public data sharing.
3
Select the option matching all correct flags without non-existent or invalid parameter names.
The option specifying '--location=europe-west3 --default-storage-class=nearline --uniform-bucket-level-access --public-access-prevention' is selected.
It complies fully with syntax and architectural requirements.

Anahtar Kavram

Cloud Storage Bucket Deployment via gcloud storage CLI
Bu soruyu puanla

Konular

Deploying and Configuring Cloud Storage Buckets and Objects