Tüm alıştırma soruları

A digital video streaming network generates automated closed-caption text files immediately after new broadcast episodes air. During the first 30 days, localization teams frequently read and modify these caption files. Between day 31 and day 365, access drops to infrequent reference checks (less than once per month). Beyond 365 days, the files are rarely accessed but must be retained for 5 years for compliance. Which TWO Cloud Storage bucket and lifecycle configuration strategies should you implement to optimize costs?

A systems administrator needs to deploy a high-availability Cloud SQL for MySQL database instance that is accessible exclusively using Private IP from an existing Virtual Private Cloud (VPC) network named `internal-vpc`. Which two configurations or procedures must be executed to satisfy these requirements? (Select TWO answers.)

A cloud engineer is deploying a high-availability production Cloud SQL for MySQL instance named `prod-mysql-db` inside a custom Virtual Private Cloud (VPC) network named `corp-vpc`. Security governance dictates that the database instance must strictly use Private IP connectivity without any public IP interface allocated, and must support automatic multi-zone failover. Which TWO configuration steps must be performed to satisfy these requirements?

A financial application deployed on a GKE Standard cluster relies on a Horizontal Pod Autoscaler (HPA) to scale Pod replicas from 4 to 40 during high-traffic trading hours. During a recent market volatility event, HPA triggered scaling, but newly created web Pods remained stuck in a `Pending` state for over 15 minutes due to insufficient CPU capacity on existing cluster nodes. Additionally, the operations team plans to run batch analytics workloads on a dedicated cost-optimized Spot VM node pool, but must prevent latency-sensitive web Pods from being scheduled on these Spot nodes. Which combination of operations correctly resolves the node starvation issue and isolates the batch workloads?

An operations team needs to test a new container image for an existing Cloud Run service named `order-service`. They want to deploy the new revision without automatically directing live user traffic to it, and then split incoming requests so that 10% goes to the new revision while 90% remains on the previous revision (`order-service-00001`). Which TWO gcloud CLI commands should they execute to accomplish this? (Select TWO answers.)

Your organization wants to allow a junior administrator to perform basic operational tasks on Compute Engine virtual machines, such as starting, stopping, and resetting instances, without granting full project administration rights. Following Google Cloud best practices for security and access control, which predefined IAM role should you assign to the administrator?

A cloud engineer is tasked with deploying an event-driven Go microservice using Google Cloud Functions (2nd gen). The function must execute whenever a new object is created in a Cloud Storage bucket in the project. To adhere to security best practices and ensure successful event delivery, several setup and deployment tasks must be performed in sequence. Arrange the operational steps below in the correct logical execution sequence from first to last.

You are deploying a Global External Application Load Balancer using the gcloud CLI to serve traffic for a Web application running on Compute Engine instance groups. In what sequence must you configure and link the load balancing components from backend to frontend?

An enterprise platform team is developing modular Google Cloud Deployment Manager templates written in Python to dynamically calculate persistent disk allocations and VM custom metadata based on environment variables. A cloud engineer must first inspect the fully expanded resource manifests and dry-run state without actually provisioning infrastructure in Google Cloud. Once the generated configuration is audited and approved, the engineer must commit and provision the resources. Which TWO steps should the cloud engineer take to execute this deployment lifecycle?

An enterprise architecture team is using the Google Cloud Pricing Calculator to estimate monthly infrastructure costs for a telemetry processing system. The workload requires Compute Engine virtual machines to run continuously 24 hours a day, 7 days a week throughout the entire month. The team cannot sign a 1-year or 3-year term commitment, but requires an accurate baseline expense model. Which discount mechanism does the Pricing Calculator automatically apply to the estimated monthly compute cost for these continuously running instances?

A DevOps team member needs to link several newly created Google Cloud projects to an existing corporate Billing Account. The team member must be able to associate projects with the billing account, but should not be permitted to modify payment methods, view billing details for unrelated projects, or manage billing account users. Which IAM role should be granted to the team member on the Billing Account to satisfy the principle of least privilege?

A cloud engineer is tasked with establishing a secure, isolated Virtual Private Cloud (VPC) environment in Google Cloud for processing sensitive financial analytics. The solution must completely block general internet egress from internal instances while allowing compute instances without external IP addresses to securely access Cloud Storage using Private Google Access. Administrative SSH management must be strictly restricted to Google Identity-Aware Proxy (IAP).

What is the correct sequential order of operational steps to provision the custom VPC infrastructure, configure regional subnetwork connectivity with Private Google Access, enforce high-priority egress allow rules for restricted Google APIs, implement fallback zero-trust egress blocking, and secure administrative ingress access?

A SaaS organization is designing a multi-tier solution on Google Cloud Compute Engine. The public web application requires HTTPS load balancing across multiple regions, acceleration of static website assets, and domain resolution. The internal backend service processes non-HTTP raw TCP streaming data from private VPC resources and requires preservation of client source IP addresses. Which TWO network architecture decisions should you recommend to fulfill these requirements?

An enterprise operations team is preparing to enable dynamic workload scaling for a microservice deployed on a Google Kubernetes Engine (GKE) cluster. To ensure accurate autoscaling metric calculations and maintain application availability during scaling events, arrange the following CLI management steps in the correct operational sequence from first to last.

Your organization runs an enterprise web application on a Compute Engine Managed Instance Group (MIG) configured with autoscaling. The application requires 4 minutes (240 seconds) after VM boot to download artifacts, initialize local caches, and pass health checks. During sudden load spikes, the autoscaler initiates multiple scale-out events in rapid succession before previously launched instances complete startup, leading to over-provisioning and resource instability. Furthermore, the operations team needs to collect detailed OS-level RAM usage metrics from these VM instances inside Cloud Monitoring. Which set of actions should you take to resolve both issues?

A Cloud Engineer is deploying a multi-tier application infrastructure containing Compute Engine instances and a Cloud SQL database into a newly created target project named `prod-data-project` using Google Cloud Deployment Manager. The deployment templates are maintained in a central repository and executed from a centralized CI/CD host project `ops-ci-project`. When executing `gcloud deployment-manager deployments create prod-stack --config=main.yaml --project=prod-data-project`, the deployment fails with an error indicating that the Cloud SQL Admin API (`sqladmin.googleapis.com`) is not enabled. Which action should the engineer take to resolve this issue?

A cloud engineer is deploying a new Cloud SQL for PostgreSQL instance named `analytics-db` for an internal reporting application. The compliance policy requires automated daily backups starting at 02:00 UTC and point-in-time recovery (PITR) enabled. Additionally, to ensure network security for public IP access, the instance must accept incoming connections strictly from an on-premises office CIDR block (`198.51.100.45/32`). Which `gcloud` command should the engineer run to provision this database instance correctly?

A cloud engineer needs to add a new dedicated pool of compute nodes to an existing GKE Standard cluster named `app-cluster` in zone `us-central1-a`. The new nodes must use the `e2-highmem-16` machine type to support memory-intensive workloads. Which `gcloud` command should the engineer execute to fulfill this requirement?

A cloud engineer is provisioning a production Cloud SQL for PostgreSQL instance named `analytics-db` in the `us-central1` region. The database must be reachable exclusively via Private IP within an existing Virtual Private Cloud network named `corp-vpc`, completely disabling any public IP address exposure. Additionally, the instance must be configured for High Availability (HA) across multiple zones and allow disk storage to automatically scale as data grows. Which `gcloud` command correctly deploys the instance according to these requirements?

A cloud engineer is using the Google Cloud Pricing Calculator to model monthly expenses for an application workload deployed on Google Compute Engine across a 30-day month (720 total hours). The workload requires 10 virtual machines (`e2-standard-4`), each priced at an un-discounted base compute rate of $0.10 per hour. The company purchases a 3-year Committed Use Discount (CUD) for E2 instances, which provides a 45$ 0.04 per GB per month (storage pricing is not subject to CUDs). What is the total net monthly cost, in USD, for compute and disk storage across all 10 virtual machines combined?