Tüm alıştırma soruları

A healthcare analytics platform on Google Cloud is planning the serverless compute architecture for two microservices:

1. Service A: A lightweight Python script triggered by incoming HTTP webhooks from patient monitoring devices, requiring minimal deployment overhead and execution under 5 seconds.
2. Service B: A custom microservice compiled from C++ source code packaged as a Docker container image that must process up to 80 concurrent HTTP requests per instance to optimize compute costs.

Which of the following serverless compute recommendations should the cloud engineer implement? (Select TWO.)

A cloud engineer is setting up cost oversight for a newly created workload. The engineer needs to receive automated email notifications when project spending reaches defined limits and must also analyze daily itemized spend trends using SQL. Which TWO actions should the engineer take to meet these requirements? (Select TWO answers.)

Match each Google Cloud database or persistent storage option to the enterprise workload requirement that best aligns with its architectural characteristics and performance capabilities.

Your organization needs to grant an external audit team read-only access to inspect IAM policy bindings across all Google Cloud projects contained within a specific Folder named 'Finance-Workloads'. To strictly enforce the principle of least privilege, you must avoid primitive roles or overly permissive predefined roles by defining a custom IAM role with only the `resourcemanager.projects.getIamPolicy` permission at the folder level and assigning it to the auditors' Google Group via the `gcloud` CLI. In what exact order should you execute the configuration and command-line steps to implement this security control?

A cloud engineer is configuring a cost estimate in the Google Cloud Pricing Calculator for a high-availability database cluster operating continuously in `us-central1` for a $730$-hour month.

The target architecture consists of the following components:
1. Compute Engine: $10$ `custom-2-8` VM instances (each with $2$ vCPUs and $8\text{ GB}$ of RAM).
- Base rate per vCPU: $\$0.033174$ per hour.
- Base rate per GB RAM: $\$0.004446$ per hour.
- Sustained Use Discount (SUD): Instances run $100\%$ of the month, qualifying for an effective $30\%$ discount on total compute costs ($0.70$ multiplier).
2. Storage: Each of the $10$ instances uses a $200\text{ GB}$ Extreme Persistent Disk (`pd-extreme`) provisioned with $2,500\text{ IOPS}$ per disk.
- Capacity rate: $\$0.125$ per GB per month.
- Provisioned IOPS rate: $\$0.025$ per provisioned IOPS per month.
3. Network Egress: Total internet data egress from `us-central1` to North America is $500\text{ GB}$ per month.
- First $100\text{ GB}$ per month: $\$0.00$ per GB (free tier).
- Next $400\text{ GB}$ ($101\text{ GB}$ to $500\text{ GB}$): $\$0.12$ per GB.

What is the net total monthly cost in USD for this workload? (Round your final answer to two decimal places.)

A cloud engineer needs to estimate the monthly cost of storing database backups in Google Cloud Storage using the Google Cloud Pricing Calculator. Which of the following parameters must be configured in the pricing calculator to obtain an accurate monthly cost estimate? (Select TWO answers.)

An enterprise operations team is structuring their Google Cloud resource hierarchy. They created a designated Folder named `Staging-Environment` for testing workloads. You need to allow the software engineering group to create new GCP projects within the `Staging-Environment` Folder only, without giving them project creation permissions across the rest of the Organization. Which administration action follows Google Cloud recommended best practices and the principle of least privilege?

A cloud administrator needs to request a regional Compute Engine N2 CPU quota increase for project `analytics-prod-942` in the `us-east4` region using the Google Cloud Console. What is the correct sequential order of steps required to locate and submit this quota increase request?

An organization is planning a Google Kubernetes Engine (GKE) cluster architecture to host stateless web microservices. The DevOps team wants to eliminate manual node provisioning and operating system patching overhead while ensuring the application remains available even if an entire availability zone fails. Which TWO architectural options should be selected to fulfill these requirements?

A company needs to plan compute resources for a nightly data indexing task on Google Cloud. The task runs once per day for approximately 4 hours, periodically saves checkpoint state to Cloud Storage, and can safely resume without data loss if pre-empted. The primary goal is to minimize compute infrastructure costs. Which compute deployment strategy should the cloud engineer select?

A security infrastructure team is designing a Google Compute Engine architecture for a 24/7 continuous log parsing engine. Profiling shows that the workload requires exactly $6\text{ vCPUs}$ and $45\text{ GB}$ of RAM during steady-state operations. Standard machine types either under-allocate RAM or over-allocate vCPUs, leading to unnecessary operational expenses. The application cannot tolerate preemption or unexpected instance termination. Which configuration and purchasing strategy should the cloud engineer recommend to minimize cost while meeting all technical requirements?

A financial technology enterprise is planning the serverless compute architecture for a financial statement rendering microservice on Google Cloud. The microservice must execute a proprietary, custom-compiled Linux binary packaged inside a container, and it must process up to 80 concurrent HTTP requests per instance to optimize compute costs and minimize cold starts. Which serverless compute option should the cloud engineering team select to meet these requirements?

A cloud engineer needs to enable the Google Kubernetes Engine API (`container.googleapis.com`) for a target project named `app-cluster-prod` using the `gcloud` CLI tool. Which of the following requirements and commands are necessary to successfully enable this API? (Select TWO.)

A software developer requires permission to view and read objects within Cloud Storage buckets in a specific Google Cloud project, but must not be able to create, modify, or delete objects. Which IAM role should be assigned to the developer to enforce the principle of least privilege?

A cloud engineer needs to expand the primary IPv4 range of an existing subnet in a Google Cloud custom-mode Virtual Private Cloud (VPC) network without causing downtime to running Virtual Machines. Arrange the operational steps in the correct order from first to last.

An organization is designing a Google Cloud Storage solution for storing IoT device diagnostic logs. The data access profile indicates that newly created log objects are read frequently during the first 30 days for operational troubleshooting. Between 30 and 90 days, logs are read infrequently (approximately once per month) for performance analysis. After 90 days, logs are retained for compliance purposes and accessed less than once a year. The primary objective is to minimize total cost of ownership (TCO) without incurring premature data access or retrieval cost penalties. Which Cloud Storage class configuration and Object Lifecycle Management policy should be implemented?

An enterprise is migrating an online transaction processing system to Google Cloud. The architecture consists of two primary components with distinct storage requirements:

1. A transactional relational database requiring full ANSI SQL support, multi-region global strong consistency, and automatic horizontal write scaling without manual database sharding.
2. A real-time telemetry processing pipeline running on Compute Engine instances that requires a local block storage volume for temporary scratch files, capable of delivering over 100,000 IOPS at sub-millisecond latency.

Which combination of Google Cloud database and block storage services satisfies all operational and performance requirements with minimal administrative overhead?

A system administrator is creating an initial cost estimate using the Google Cloud Pricing Calculator for a set of standard Compute Engine virtual machines that will run continuously 24 hours a day, 7 days a week. Which pricing discount is automatically factored into the estimated monthly compute cost by the calculator without requiring a long-term contractual commitment?

A finance specialist in your organization must be given the capability to link newly provisioned Google Cloud projects to the organization's central Billing Account and monitor project cost metrics. Following Google recommended security practices of least privilege, the specialist must not have administrative authority to alter billing account policies or permissions to modify cloud infrastructure resources within the projects. Which pair of IAM role assignments correctly fulfills these requirements?

A media streaming company is designing a new containerized platform on Google Cloud. The engineering team wants to minimize cluster management overhead by eliminating the need to manually provision, configure, scale, or maintain worker nodes and node pools. Which GKE operational mode should the team select?