Tüm alıştırma soruları

You need to deploy a Global External Application Load Balancer in Google Cloud using gcloud commands to serve a web application. What is the correct sequence of steps to configure the load balancer components from the back end to the front end?

An enterprise security architecture team requires all Compute Engine VM instances provisioned for a mission-critical web backend to use fine-grained IAM authorization. The instances must run under a custom IAM service account named `[email protected]` with restricted Cloud Pub/Sub permissions, and they must automatically run a bootstrapping script located at a private Cloud Storage path (`gs://config-bucket-prod/startup.sh`) during initialization. Which `gcloud` CLI command correctly creates an instance template meeting these security and operational requirements?

A cloud engineer needs to launch a Compute Engine VM instance named `app-server` into a custom Virtual Private Cloud subnet named `backend-subnet`. Which `gcloud compute instances create` command flag must be used to place the VM directly into this target subnet?

You are deploying a Global External HTTP Load Balancer using the gcloud CLI to distribute web application traffic across Compute Engine instance groups in multiple regions. Place the deployment steps in the correct chronological order from first to last.

An architect is using the Google Cloud Pricing Calculator to project the monthly operational expense for a reporting server hosted on Compute Engine. The workload requires a single custom VM running $730$ hours per month with a base un-discounted rate of $\$0.20$ per hour. The organization purchases a 1-year Committed Use Discount (CUD) for this compute instance, which grants a $37\%$ discount on the instance compute costs. Additionally, the instance uses $250\text{ GB}$ of Standard Persistent Disk storage priced at $\$0.04$ per GB per month, and generates $500\text{ GB}$ of internet egress data per month priced at $\$0.12$ per GB. What is the total estimated monthly cost in USD for this workload using the Pricing Calculator?

A healthcare telemetry pipeline requires a new Cloud Storage bucket named `patient-telemetry-us-central1-2026` in the `us-central1` region to ingest real-time patient monitoring logs. Security governance dictates that Uniform Bucket-Level Access (UBLA) must be enforced to manage access strictly via IAM roles. Additionally, data management policies require transitioning objects to Nearline storage after 30 days and deleting them after 365 days using an automated configuration file (`lifecycle.json`). Which command sequence using Google Cloud's primary CLI tool correctly accomplishes this deployment according to Google Cloud best practices?

An enterprise organization is planning a Google Cloud Virtual Private Cloud (VPC) network architecture to connect an on-premises data center using the IPv4 range $10.100.0.0/16$ to GCP via Cloud VPN. The cloud deployment will span two regions (`us-central1` and `europe-west1`) and will host Google Kubernetes Engine (GKE) clusters. Which TWO network design practices should the cloud engineer follow to prevent IP address collisions and maintain flexible network expansion? (Select TWO.)

An organization is preparing to migrate an enterprise application stack to Google Cloud and needs to model monthly infrastructure expenses using the Google Cloud Pricing Calculator. The target architecture includes a continuous 24/7 web application backend with predictable resource demand, along with a separate stateless batch data processing job that is fault-tolerant. Which of the following configuration options in the Pricing Calculator should be selected to accurately model valid cost-reduction strategies for these workloads? (Select TWO answers.)

An organization manages several Google Cloud projects linked to a single central Cloud Billing account. To perform historical spend analysis using SQL, the lead engineer creates a dedicated project named `corp-billing-analytics` intended to host the billing dataset. The engineer needs to configure a detailed daily Cloud Billing export to BigQuery while following the principle of least privilege.

Which configuration strategy correctly enables the Cloud Billing export to the target dataset?

An IoT enterprise is designing a Google Cloud network architecture for a global fleet of connected sensors. The architecture has two primary requirements:
1. Ingest high-volume, non-HTTP raw TCP telemetry traffic from public internet clients globally, terminating TLS encryption at the Google network edge before forwarding traffic to Compute Engine backends.
2. Provide private domain name resolution for administrative microservices communicating between two peered Virtual Private Cloud (VPC) networks without exposing record sets to the public internet.

Which TWO configurations should the cloud architecture team implement to meet these requirements? (Select TWO.)

A media production company ingests raw high-definition footage into Google Cloud Storage for daily video editing. Editors frequently read and modify the video files during the first 30 days after ingestion. Between day 31 and day 365, the footage is accessed infrequently (typically once per quarter) for producing retrospective highlight reels, but must remain available immediately with millisecond latency when requested. After 365 days, the footage is no longer required and should be permanently removed. Which Cloud Storage lifecycle configuration minimizes total costs while satisfying these operational access requirements?

An operations engineer requires permissions to restart and reset existing Compute Engine instances in a staging project after automated tests complete. The engineer must not be allowed to create new VM instances, delete persistent disks, or modify Virtual Private Cloud (VPC) network configurations. Which IAM role assignment complies with Google Cloud's principle of least privilege?

A network administrator needs to expand the primary IPv4 address range of an existing custom-mode VPC subnet in Google Cloud from $10.1.0.0/24$ to $10.1.0.0/23$ without creating IP conflicts or interrupting active virtual machines. In what chronological order should the administrator execute the following steps to ensure a successful and non-disruptive range expansion?

An engineer wants to deploy a new microservice to Google Cloud Run directly from source code using the gcloud CLI. Arrange the following steps in the correct chronological sequence required to execute this deployment.

A financial analytics company needs to configure an existing Cloud Storage bucket named `fin-transactions-cold-2026` located in `europe-west3` to hold archived transaction logs for compliance. The compliance policy mandates that objects must be locked for a retention duration of 7 years ($220,752,000$ seconds) and per-object Access Control Lists (ACLs) must be completely disabled to enforce unified Access Control through IAM roles across the bucket. Which `gcloud storage` command correctly applies both the 7-year retention policy and enforces uniform bucket-level access?

A financial startup wants to enforce programmatic cost control for a non-critical development project. If the monthly project expenses cross $5,000, running Compute Engine virtual machine instances in that project must be automatically shut down to prevent unexpected charges. Which Google Cloud solution correctly satisfies this operational requirement?

A cloud engineering team is designing the storage architecture for two microservices deployed on Google Cloud Compute Engine:

1. An Event Analytics service requiring sub-10 millisecond latency for massive write-heavy time-series and key-value data ingestion.
2. An Order Processing service requiring a relational schema, full ACID transaction support, standard SQL querying, and regional high availability.

Which TWO database configurations should the team select to meet these requirements while adhering to Google Cloud best practices? (Select TWO.)

A company runs a stateless web application on a Google Kubernetes Engine (GKE) Standard cluster. During peak traffic hours, incoming requests cause high CPU utilization, requiring more Pod instances. However, when additional Pods are created, several remain stuck in a Pending status because the current worker nodes have exhausted their CPU and memory capacity. Which configuration strategy should the cloud engineer implement to automatically handle scaling for both the workload Pods and the underlying cluster node capacity?

Your organization is hosting a backend microservice on Compute Engine instances within a Virtual Private Cloud (VPC) network. The microservice communicates over raw TCP traffic on port 8080 and requires internal regional traffic distribution without SSL offloading or layer 7 path routing features. Which load balancer should you deploy?

A gaming studio's DevOps team is provisioning a new Google Cloud Storage bucket named `game-patch-assets-global` in the `us-central1` region using the modern `gcloud storage` CLI tool. The bucket will store high-volume patch updates for client distribution. The team must enforce centralized IAM access permissions across all objects while disabling legacy per-object Access Control Lists (ACLs). Additionally, they need to ensure that patch files older than 30 days automatically transition from Standard to Nearline storage to minimize ongoing storage fees. Which TWO commands or configuration steps must the team execute to fulfill these requirements? (Select TWO.)