Tüm alıştırma soruları

An enterprise automotive company is provisioning a dedicated Google Cloud project for an IoT telemetry processing pipeline. The cloud governance team must authorize a DevOps engineer to link this newly created project to the corporate Cloud Billing Account. The organization strictly enforces the principle of least privilege, ensuring the engineer cannot modify billing account payment settings or manage unrelated resources across the organization. Which of the following IAM roles must be assigned to the DevOps engineer to enable project linking? (Select TWO.)

An enterprise media organization is planning a Google Kubernetes Engine (GKE) cluster architecture to host an internal microservices platform. The architecture must satisfy two specific infrastructure requirements:

1. The cluster control plane management API must be accessible exclusively from the organization's on-premises administrative network CIDR block ($10.200.0.0/16$) via Cloud VPN, blocking all public internet access to the control plane.
2. Cluster worker nodes must be provisioned without public IP addresses, yet workloads must maintain outbound internet connectivity to pull external container images and transmit telemetry.

Which TWO architectural configurations should the team include in their GKE cluster plan? (Select TWO.)

A backend team has built a stateless container image for a web microservice and pushed it to Artifact Registry at `us-docker.pkg.dev/my-project/apps/inventory-api:v1`. They want to quickly deploy this containerized application to Google Cloud Run and ensure it accepts public HTTP requests without requiring user authentication. Which `gcloud` command should they execute?

A cloud engineer needs to deploy a Compute Engine virtual machine instance named `prod-db` to host a continuous, non-interruptible database workload in the `us-central1-f` zone. Which `gcloud` command correctly provisions this virtual machine?

An enterprise architecture team is designing the network foundation in Google Cloud for a workload that will expand across multiple regions and connect to on-premises data centers via Cloud Interconnect. The team needs to establish IP address management (IPAM) guidelines for the Virtual Private Cloud (VPC) topology to avoid IP space conflicts and ensure explicit control over regional subnet creation. Which TWO architectural decisions should the team implement during the VPC network and subnet planning phase? (Select TWO.)

A cloud administrator needs to deploy a horizontally scalable, multi-region relational database using the Google Cloud CLI. Which command should be executed to create a new Cloud Spanner instance named 'prod-db' configured with 3 nodes in the 'nam-eur-asia1' multi-region configuration?

A software developer on your team needs to create and manage Cloud Pub/Sub topics and subscriptions within a development project. The developer must not have access to modify project IAM permissions or create resources in other Google Cloud services. Following Google Cloud's principle of least privilege, which IAM role should you grant to the developer?

A cloud engineer is deploying a Cloud Storage bucket named `audit-vault-2026` in the `us-east1` region to hold long-term regulatory compliance logs. Security policies mandate that per-object ACLs must be completely disabled by enforcing Uniform Bucket-Level Access upon creation. Furthermore, all files uploaded to this bucket must default to the `ARCHIVE` storage class to minimize storage expenditure. Which command should the engineer run to deploy the bucket according to Google-recommended best practices?

A solutions architect is configuring cost estimates in the Google Cloud Pricing Calculator for a hybrid enterprise application. The architecture consists of long-running database servers, batch worker nodes running fault-tolerant tasks, and long-term application logs. Which of the following recommendations correctly describe how to model these components accurately in the Pricing Calculator? (Select TWO.)

Match each Google Cloud enterprise workload requirement on the left with the database or persistent block storage service on the right that best satisfies the technical constraints with minimal operational overhead.

An operations engineer is deploying a stateless backend microservice to Google Cloud Run using the gcloud command-line interface. The service must accept incoming asynchronous HTTP calls from an authenticated client application while adhering to Google Cloud security and container environment standards. Which of the following configuration steps are required to ensure successful deployment and invocation of this Cloud Run service? (Select TWO options.)

A cloud administrator is tasked with setting up a highly compliant log storage architecture on Google Cloud using modern `gcloud storage` CLI utilities. The solution requires creating a bucket with uniform bucket-level access enabled, setting a 365-day retention policy, defining and attaching a lifecycle policy to automatically transition objects to ARCHIVE storage after 90 days, and finally populating the bucket with historical log files. In what exact sequential order should the administrator perform these operations?

A developer is deploying a stateless containerized web application to Google Cloud Run using the gcloud CLI. The application must be publicly accessible over HTTP without requiring authentication. Which TWO configuration steps or practices must be implemented to ensure the deployment succeeds and is publicly accessible? (Select TWO.)

A system administrator needs to provision a Compute Engine virtual machine instance using the Google Cloud CLI (`gcloud`). The VM must execute a local multi-line initialization script on startup and perform read-only operations against a Cloud Storage bucket using a custom service account following the principle of least privilege. In what chronological sequence must the administrator perform the steps to configure and launch this virtual machine?

A smart grid utility ingests high-frequency meter telemetry into a Google Cloud Storage bucket. Analytics pipelines continuously process and query this data for the first 30 days. Between day 31 and day 365, data is accessed less than once per quarter for periodic compliance reporting. After 365 days, the data is no longer required and must be removed. Which Object Lifecycle Management configuration minimizes total cost while fulfilling these operational requirements?

A financial technology company is planning the networking architecture on Google Cloud for two distinct backend services running on Compute Engine instances:

1. External edge sensors transmit non-HTTP raw TCP traffic over the internet and require the backend instances to inspect the original client IP address directly.
2. Internal microservices execute high-throughput RPC operations over TCP between instances located in the same Virtual Private Cloud (VPC) network.

Which TWO load balancing solutions should the cloud engineer select to satisfy these architecture requirements? (Select TWO.)

A DevOps team manages a Cloud Storage bucket named `financial-reports-repository` that receives daily transaction exports. To comply with cost optimization guidelines, all objects in the bucket must automatically transition to Nearline storage after 30 days of creation. A cloud engineer has authored a local JSON lifecycle configuration file named `lifecycle-policy.json`. Which command should the engineer execute to apply this lifecycle policy to the existing bucket?

A lead developer at a logistics firm needs to administer workloads on a newly deployed Google Kubernetes Engine (GKE) Autopilot cluster named `logistics-tracking-prod` in the `europe-west1` region. Although the developer has authenticated to Google Cloud via `gcloud auth login`, running `kubectl get pods` fails with an error indicating that the connection to `localhost:8080` was refused. Which `gcloud` command must the developer execute to update local cluster credentials and enable `kubectl` management?

A cloud engineer needs to deploy a new custom Virtual Private Cloud (VPC) network, provision a regional subnet, and enforce ingress traffic security for a specific web server instance using network tags. Arrange the following deployment steps in the correct order from first to last.

A cloud engineer at a smart precision agriculture startup needs to delegate project billing administration to a newly hired team lead. The team lead must be able to link newly created Google Cloud projects to the company's central Billing Account and unlink projects when necessary, following the principle of least privilege. The team lead should not have permission to modify billing account payment methods or manage overall billing account access. Which combination of Identity and Access Management (IAM) roles provides the minimum necessary permissions?