Tüm alıştırma soruları

A logistics enterprise is designing a high-throughput fleet tracking platform on Google Cloud to record continuous telemetry and diagnostic metrics from $50,000$ active delivery vehicles. The ingest layer requires consistent sub-10 millisecond write latencies, must dynamically scale capacity up to hundreds of terabytes without database schema maintenance or manual sharding, and relies solely on single-row key lookups by vehicle ID and timestamp. Which database architecture should you recommend to meet these requirements with minimal operational overhead?

Arrange the following administrative procedures in the correct chronological order required to authenticate to a Google Kubernetes Engine (GKE) cluster, confirm active cluster access, submit a new workload manifest, and verify that the pod deployment finishes successfully.

A compliance team at a financial company requires a new Google Cloud Storage bucket to store daily transaction records in the europe-west1 region. The bucket must enforce Uniform Bucket-Level Access for consistent IAM access management and have object versioning enabled to prevent accidental overwrites. Which command should you execute to deploy the bucket according to Google-recommended best practices?

A database administrator needs to create and configure Cloud SQL instances within a Google Cloud development project. The administrator must be able to perform all administrative tasks on Cloud SQL resources, but must not have permissions to manage other Google Cloud services or edit project IAM policies. Following Google's recommended security best practices of least privilege, which role should be granted to the administrator?

You are managing a Google Kubernetes Engine (GKE) cluster and need to migrate running workloads from an existing node pool to a newly required machine type with minimal downtime. What is the correct sequence of steps to complete this node pool migration?

An online education platform is designing a new Google Kubernetes Engine (GKE) cluster architecture to handle on-demand video encoding tasks. The video encoding workloads are stateless, fault-tolerant, and can tolerate sudden instance preemptions. To reduce operational burden, the engineering leadership has mandated that node management overhead—including node provisioning, security patching, and OS upgrades—must be completely managed by Google Cloud. Which cluster design strategy fulfills all technical requirements while minimizing compute expenses?

An operations engineer is tasked with configuring a Global External Application Load Balancer using the gcloud CLI to secure incoming HTTPS web traffic destined for Compute Engine managed instance groups. The deployment requires establishing health monitoring, SSL encryption via Google-managed certificates, and frontend traffic routing. Which sequence correctly orders the deployment commands from the backend infrastructure up to the public frontend entry point?

A multinational retail company generates end-of-day point-of-sale (POS) transaction files that are stored in Google Cloud Storage. Finance teams access these files daily during the first 30 days to complete inventory and sales reconciliation. After 30 days, the files are rarely accessed but must be retained for 5 years for legal compliance. Which storage bucket lifecycle configuration minimizes total storage and retrieval costs while satisfying these access requirements?

Your organization is establishing a hybrid cloud architecture connecting an on-premises data center to a Google Cloud Virtual Private Cloud (VPC) network via Cloud VPN. On-premises client machines need to resolve private DNS queries for instances hosted in GCP ending with `.internal.example.com`. You need to configure Cloud DNS to allow on-premises systems to resolve these names. Which TWO configuration steps are required to satisfy this requirement?

An enterprise application receives raw encrypted TCP traffic on port 8443 from global clients. The infrastructure team needs to terminate SSL/TLS at the load balancer level and forward unencrypted TCP traffic to a backend Compute Engine Managed Instance Group. The application does not use HTTP or HTTPS protocols. Which Google Cloud load balancing architecture should be deployed to fulfill these requirements?

A cloud administrator receives a newly provisioned workstation and installs `kubectl` to manage an existing regional Google Kubernetes Engine (GKE) cluster named `ecommerce-prod` located in the `us-east4` region. When running `kubectl get pods`, the command fails with an error stating `The connection to the server localhost:8080 was refused`. Which `gcloud` command must the administrator execute to populate the local kubeconfig file with cluster context credentials?

You are configuring internal domain name resolution for instances running within a Virtual Private Cloud (VPC) network named `corp-vpc`. You plan to use the Google Cloud CLI (`gcloud`) to create a Cloud DNS managed zone named `corp-zone` for the internal domain `internal.corp.com`. Which combination of flags must you specify in the `gcloud dns managed-zones create` command to restrict resolution of this zone exclusively to `corp-vpc`?

Your company hosts a microservices workload on a Google Kubernetes Engine (GKE) cluster. During high traffic spikes, CPU consumption increases significantly across existing pods, resulting in high response latency. The existing cluster nodes have adequate spare CPU and memory resources to handle additional pod workloads. You need to configure automated scaling so that new pod replicas are scheduled when CPU utilization reaches a high threshold. What operational action should you take?

A Cloud Engineer manages a Google Kubernetes Engine (GKE) Standard cluster that hosts a stateless, fault-tolerant batch processing pipeline. During peak activity, multiple batch processing Pods remain in a Pending state due to insufficient CPU and memory resources on existing nodes. Management requires an automated scaling solution that provisions additional cluster capacity specifically when Pods cannot be scheduled, while minimizing compute infrastructure costs for this resilient workload. Which action should the engineer take?

A cloud engineer needs to deploy a highly available Cloud SQL PostgreSQL instance using Private IP connectivity within a custom Virtual Private Cloud (VPC) network, followed by creating a cross-region read replica using the Google Cloud CLI. Arrange the required infrastructure provisioning and database creation steps in the correct chronological execution order from first to last.

Your organization maintains a private Cloud DNS zone hosted in `vpc-shared-services` that resolves internal service domain names. A team deploying a separate workload in `vpc-analytics` needs their Compute Engine instances to resolve these internal DNS names without duplicating DNS records. Which configuration should you implement to enable internal DNS resolution from `vpc-analytics`?

A Cloud Engineer needs to securely configure a workload running on Google Kubernetes Engine (GKE) to access Cloud Storage using Workload Identity instead of downloading service account keys. Arrange the following configuration and deployment steps in the correct chronological order required to grant the GKE workload secure access to Cloud Storage.

A logistics enterprise is deploying a telemetry ingestion pipeline on Google Cloud. The cloud architecture team needs to provision a dedicated Cloud Storage bucket named `telemetry-logs-prod` in the `us-east4` region. According to corporate policy, the bucket must enforce Uniform Bucket-Level Access upon creation, and an existing lifecycle configuration file named `lifecycle.json` must be applied to automatically transition log objects older than 30 days to Nearline storage. Which TWO `gcloud storage` commands should you run to meet these requirements?

A digital evidence management platform stores high-definition court proceeding videos in Google Cloud Storage. Attorneys access and stream these video recordings frequently during the active trial phase, which lasts for the first 30 days after ingest. Following the 30-day trial period, the videos are rarely accessed but must be retained for 3 years to comply with legal record preservation requirements. You need to plan a Cloud Storage solution that optimizes overall storage and operational costs while avoiding data retrieval fee penalties during the active trial period. Which TWO configuration choices should you select?

Your enterprise organization maintains a central networking project named net-host-proj containing a Google Cloud Virtual Private Cloud network named vpc-shared. A separate application development project named app-dev-proj contains its own VPC network named vpc-app-dev. You are deploying a internal Cloud DNS private zone named app.internal in net-host-proj to host custom A records for internal microservices. Virtual machine instances located in both vpc-shared and vpc-app-dev must be able to resolve domain names in the app.internal zone without exposing DNS queries to the public internet. Which TWO actions must you perform to configure Cloud DNS and VPC networking to satisfy this requirement?