Free Google Associate Cloud Engineer Dump

Question #180

You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance. What should you do?

• A. Enable the Cloud Spanner API.
• B. Configure your Cloud Spanner instance to be multi-regional.
• C. Create a new VPC network with subnetworks in all desired regions.
• D. Grant yourself the IAM role of Cloud Spanner Admin.

Correct Answer: B

Reference:

https://cloud.google.com/spanner/docs/instances

Community vote distribution

A (76%)

14%

 

Question #181

You have created a new project in Google Cloud through the gcloud command line interface (CLI) and linked a billing account. You need to create a new Compute

Engine instance using the CLI. You need to perform the prerequisite steps. What should you do?

• A. Create a Cloud Monitoring Workspace.
• B. Create a VPC network in the project.
• C. Enable the compute googleapis.com API.
• D. Grant yourself the IAM role of Computer Admin.

Correct Answer: D

Reference:

https://isb-cancer-genomics-cloud.readthedocs.io/en/latest/sections/gcp-info/gcp-info2/LaunchVM.html

Community vote distribution

C (100%)

Question #182

Your company has developed a new application that consists of multiple microservices. You want to deploy the application to Google Kubernetes Engine (GKE), and you want to ensure that the cluster can scale as more applications are deployed in the future. You want to avoid manual intervention when each new application is deployed. What should you do?

• A. Deploy the application on GKE, and add a HorizontalPodAutoscaler to the deployment.
• B. Deploy the application on GKE, and add a VerticalPodAutoscaler to the deployment.
• C. Create a GKE cluster with autoscaling enabled on the node pool. Set a minimum and maximum for the size of the node pool.
• D. Create a separate node pool for each application, and deploy each application to its dedicated node pool.

Correct Answer: C

Community vote distribution

C (56%)

A (44%)

Question #183

You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?

• A. Create the instance with the default Compute Engine service account. Grant the service account permissions on Cloud Storage.
• B. Create the instance with the default Compute Engine service account. Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.
• C. Create a new service account and assign this service account to the new instance. Grant the service account permissions on Cloud Storage.
• D. Create a new service account and assign this service account to the new instance. Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.

Correct Answer: A

Reference:

https://cloud.google.com/compute/docs/access/service-accounts

Community vote distribution

C (100%)

Question #184

You need to configure optimal data storage for files stored in Cloud Storage for minimal cost. The files are used in a mission-critical analytics pipeline that is used continually. The users are in Boston, MA (United States). What should you do?

• A. Configure regional storage for the region closest to the users. Configure a Nearline storage class.
• B. Configure regional storage for the region closest to the users. Configure a Standard storage class.
• C. Configure dual-regional storage for the dual region closest to the users. Configure a Nearline storage class.
• D. Configure dual-regional storage for the dual region closest to the users. Configure a Standard storage class.

Correct Answer: B

Community vote distribution

B (58%)

D (42%)

Question #185

You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do?

• A. Deploy the application on App Engine. For each update, create a new version of the same service. Configure traffic splitting to send a small percentage of traffic to the new version.
• B. Deploy the application on App Engine. For each update, create a new service. Configure traffic splitting to send a small percentage of traffic to the new service.
• C. Deploy the application on Kubernetes Engine. For a new release, update the deployment to use the new version.
• D. Deploy the application on Kubernetes Engine. For a new release, create a new deployment for the new version. Update the service to use the new deployment.

Correct Answer: B

Reference:

https://cloud.google.com/appengine/docs/admin-api/migrating-splitting-traffic

Community vote distribution

A (100%)

Question #186

You need to add a group of new users to Cloud Identity. Some of the users already have existing Google accounts. You want to follow one of Google’s recommended practices and avoid conflicting accounts. What should you do?

• A. Invite the user to transfer their existing account.
• B. Invite the user to use an email alias to resolve the conflict.
• C. Tell the user that they must delete their existing account.
• D. Tell the user to remove all personal email from the existing account.

Correct Answer: A

Reference:

https://support.google.com/cloudidentity/answer/7332836?hl=en

Community vote distribution

A (94%)

 

Question #187

You need to manage a Cloud Spanner instance for best query performance. Your instance in production runs in a single Google Cloud region. You need to improve performance in the shortest amount of time. You want to follow Google best practices for service configuration. What should you do?

• A. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45%. If you exceed this threshold, add nodes to your instance.
• B. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 45%. Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.
• C. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. If you exceed this threshold, add nodes to your instance.
• D. Create an alert in Cloud Monitoring to alert when the percentage of high priority CPU utilization reaches 65%. Use database query statistics to identify queries that result in high CPU usage, and then rewrite those queries to optimize their resource usage.

Correct Answer: C

Reference:

https://cloud.google.com/spanner/docs/instances

Community vote distribution

C (100%)

Question #188

Your company has an internal application for managing transactional orders. The application is used exclusively by employees in a single physical location. The application requires strong consistency, fast queries, and ACID guarantees for multi-table transactional updates. The first version of the application is implemented in PostgreSQL, and you want to deploy it to the cloud with minimal code changes. Which database is most appropriate for this application?

• A. BigQuery
• B. Cloud SQL
• C. Cloud Spanner
• D. Cloud Datastore

Correct Answer: C

Reference:

https://cloud.google.com/spanner/docs/transactions

Community vote distribution

B (59%)

C (41%)

Question #189

You are assigned to maintain a Google Kubernetes Engine (GKE) cluster named ‘dev’ that was deployed on Google Cloud. You want to manage the GKE configuration using the command line interface (CLI). You have just downloaded and installed the Cloud SDK. You want to ensure that future CLI commands by default address this specific cluster What should you do?

• A. Use the command gcloud config set container/cluster dev.
• B. Use the command gcloud container clusters update dev.
• C. Create a file called gke.default in the ~/.gcloud folder that contains the cluster name.
• D. Create a file called defaults.json in the ~/.gcloud folder that contains the cluster name.

Correct Answer: A

Reference:

https://cloud.google.com/kubernetes-engine/docs/how-to/cluster-access-for-kubectl#gcloud-config

Community vote distribution

A (95%)

 

Question #190

The sales team has a project named Sales Data Digest that has the ID acme-data-digest. You need to set up similar Google Cloud resources for the marketing team but their resources must be organized independently of the sales team. What should you do?

• A. Grant the Project Editor role to the Marketing team for acme-data-digest.
• B. Create a Project Lien on acme-data-digest and then grant the Project Editor role to the Marketing team.
• C. Create another project with the ID acme-marketing-data-digest for the Marketing team and deploy the resources there.
• D. Create a new project named Marketing Data Digest and use the ID acme-data-digest. Grant the Project Editor role to the Marketing team.

Correct Answer: A

Community vote distribution

C (100%)

Question #191

You have deployed multiple Linux instances on Compute Engine. You plan on adding more instances in the coming weeks. You want to be able to access all of these instances through your SSH client over the internet without having to configure specific access on the existing and new instances. You do not want the

Compute Engine instances to have a public IP. What should you do?

• A. Configure Cloud Identity-Aware Proxy for HTTPS resources.
• B. Configure Cloud Identity-Aware Proxy for SSH and TCP resources
• C. Create an SSH keypair and store the public key as a project-wide SSH Key.
• D. Create an SSH keypair and store the private key as a project-wide SSH Key.

Correct Answer: B

Community vote distribution

B (75%)

C (19%)

 

Question #192

You have created an application that is packaged into a Docker image. You want to deploy the Docker image as a workload on Google Kubernetes Engine. What should you do?

• A. Upload the image to Cloud Storage and create a Kubernetes Service referencing the image.
• B. Upload the image to Cloud Storage and create a Kubernetes Deployment referencing the image.
• C. Upload the image to Container Registry and create a Kubernetes Service referencing the image.
• D. Upload the image to Container Registry and create a Kubernetes Deployment referencing the image.

Correct Answer: B

Reference:

https://cloud.google.com/kubernetes-engine/docs/tutorials/hello-app

Community vote distribution

D (100%)

Question #193

You are using Data Studio to visualize a table from your data warehouse that is built on top of BigQuery. Data is appended to the data warehouse during the day.

At night, the daily summary is recalculated by overwriting the table. You just noticed that the charts in Data Studio are broken, and you want to analyze the problem. What should you do?

• A. Review the Error Reporting page in the Cloud Console to find any errors.
• B. Use the BigQuery interface to review the nightly job and look for any errors.
• C. Use Cloud Debugger to find out why the data was not refreshed correctly.
• D. In Cloud Logging, create a filter for your Data Studio report.

Correct Answer: C

Community vote distribution

B (50%)

D (29%)

14%

 

Question #194

You have been asked to set up the billing configuration for a new Google Cloud customer. Your customer wants to group resources that share common IAM policies. What should you do?

• A. Use labels to group resources that share common IAM policies.
• B. Use folders to group resources that share common IAM policies.
• C. Set up a proper billing account structure to group IAM policies.
• D. Set up a proper project naming structure to group IAM policies.

Correct Answer: B

Community vote distribution

B (100%)

Question #195

You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event. You want to follow Google- recommended practices to set up a high availability Cloud VPN. What should you do?

• A. Use a custom mode VPC network, configure static routes, and use active/passive routing.
• B. Use an automatic mode VPC network, configure static routes, and use active/active routing.
• C. Use a custom mode VPC network, use Cloud Router border gateway protocol (BGP) routes, and use active/passive routing.
• D. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes, and configure policy-based routing.

Correct Answer: D

Community vote distribution

C (100%)

Question #196

You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images. The microservice responsible for the image rendering requires a large amount of CPU time compared to the memory it requires. The other microservices are workloads that are optimized for n1-standard machine types. You need to optimize your cluster so that all workloads are using resources as efficiently as possible. What should you do?

• A. Assign the pods of the image rendering microservice a higher pod priority than the other microservices.
• B. Create a node pool with compute-optimized machine type nodes for the image rendering microservice. Use the node pool with general-purpose machine type nodes for the other microservices.
• C. Use the node pool with general-purpose machine type nodes for the image rendering microservice. Create a node pool with compute-optimized machine type nodes for the other microservices.
• D. Configure the required amount of CPU and memory in the resource requests specification of the image rendering microservice deployment. Keep the resource requests for the other microservices at the default.

Correct Answer: B

Community vote distribution

B (100%)

Question #197

Your organization has three existing Google Cloud projects. You need to bill the Marketing department for only their Google Cloud services for a new initiative within their group. What should you do?

• A. 1. Verify that you are assigned the Billing Administrator IAM role for your organization’s Google Cloud Project for the Marketing department. 2. Link the new project to a Marketing Billing Account.
• B. 1. Verify that you are assigned the Billing Administrator IAM role for your organization’s Google Cloud account. 2. Create a new Google Cloud Project for the Marketing department. 3. Set the default key-value project labels to department:marketing for all services in this project.
• C. 1. Verify that you are assigned the Organization Administrator IAM role for your organization’s Google Cloud account. 2. Create a new Google Cloud Project for the Marketing department. 3. Link the new project to a Marketing Billing Account.
• D. 1. Verify that you are assigned the Organization Administrator IAM role for your organization’s Google Cloud account. 2. Create a new Google Cloud Project for the Marketing department. 3. Set the default key-value project labels to department:marketing for all services in this project.

Correct Answer: A

Community vote distribution

A (60%)

B (21%)

C (19%)

Question #198

You deployed an application on a managed instance group in Compute Engine. The application accepts Transmission Control Protocol (TCP) traffic on port 389 and requires you to preserve the IP address of the client who is making a request. You want to expose the application to the internet by using a load balancer. What should you do?

• A. Expose the application by using an external TCP Network Load Balancer.
• B. Expose the application by using a TCP Proxy Load Balancer.
• C. Expose the application by using an SSL Proxy Load Balancer.
• D. Expose the application by using an internal TCP Network Load Balancer.

Correct Answer: B

Community vote distribution

A (75%)

B (25%)

Question #199

You are building a multi-player gaming application that will store game information in a database. As the popularity of the application increases, you are concerned about delivering consistent performance. You need to ensure an optimal gaming performance for global users, without increasing the management complexity. What should you do?

• A. Use Cloud SQL database with cross-region replication to store game statistics in the EU, US, and APAC regions.
• B. Use Cloud Spanner to store user data mapped to the game statistics.
• C. Use BigQuery to store game statistics with a Redis on Memorystore instance in the front to provide global consistency.
• D. Store game statistics in a Bigtable database partitioned by username.

Correct Answer: B

Community vote distribution

B (100%)

Question #200

You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

• A. Cloud SQL
• B. Firestore
• C. Cloud Spanner
• D. Bigtable

Correct Answer: C

Community vote distribution

C (100%)

Question #201

Your company has multiple projects linked to a single billing account in Google Cloud. You need to visualize the costs with specific metrics that should be dynamically calculated based on company-specific criteria. You want to automate the process. What should you do?

• A. In the Google Cloud console, visualize the costs related to the projects in the Reports section.
• B. In the Google Cloud console, visualize the costs related to the projects in the Cost breakdown section.
• C. In the Google Cloud console, use the export functionality of the Cost table. Create a Looker Studio dashboard on top of the CSV export.
• D. Configure Cloud Billing data export to BigQuery for the billing account. Create a Looker Studio dashboard on top of the BigQuery export.

Correct Answer: D

Community vote distribution

D (100%)

Question #202

You have an application that runs on Compute Engine VM instances in a custom Virtual Private Cloud (VPC). Your company’s security policies only allow the use of internal IP addresses on VM instances and do not let VM instances connect to the internet. You need to ensure that the application can access a file hosted in a Cloud Storage bucket within your project. What should you do?

• A. Enable Private Service Access on the Cloud Storage Bucket.
• B. Add storage.googleapis.com to the list of restricted services in a VPC Service Controls perimeter and add your project to the list of protected projects.
• C. Enable Private Google Access on the subnet within the custom VPC.
• D. Deploy a Cloud NAT instance and route the traffic to the dedicated IP address of the Cloud Storage bucket.

Correct Answer: A

Community vote distribution

C (100%)

Question #203

Your company completed the acquisition of a startup and is now merging the IT systems of both companies. The startup had a production Google Cloud project in their organization. You need to move this project into your organization and ensure that the project is billed to your organization. You want to accomplish this task with minimal effort. What should you do?

• A. Use the projects.move method to move the project to your organization. Update the billing account of the project to that of your organization.
• B. Ensure that you have an Organization Administrator Identity and Access Management (IAM) role assigned to you in both organizations. Navigate to the Resource Manager in the startup’s Google Cloud organization, and drag the project to your company’s organization.
• C. Create a Private Catalog for the Google Cloud Marketplace, and upload the resources of the startup’s production project to the Catalog. Share the Catalog with your organization, and deploy the resources in your company’s project.
• D. Create an infrastructure-as-code template for all resources in the project by using Terraform, and deploy that template to a new project in your organization. Delete the project from the startup’s Google Cloud organization.

Correct Answer: D

Community vote distribution

A (100%)

Question #204

All development (dev) teams in your organization are located in the United States. Each dev team has its own Google Cloud project. You want to restrict access so that each dev team can only create cloud resources in the United States (US). What should you do?

• A. Create a folder to contain all the dev projects. Create an organization policy to limit resources in US locations.
• B. Create an organization to contain all the dev projects. Create an Identity and Access Management (IAM) policy to limit the resources in US regions.
• C. Create an Identity and Access Management (IAM) policy to restrict the resources locations in the US. Apply the policy to all dev projects.
• D. Create an Identity and Access Management (IAM) policy to restrict the resources locations in all dev projects. Apply the policy to all dev roles.

Correct Answer: C

Community vote distribution

A (75%)

C (25%)

Question #205

You are configuring Cloud DNS. You want to create DNS records to point home.mydomain.com, mydomain.com, and www.mydomain.com to the IP address of your Google Cloud load balancer. What should you do?

• A. Create one CNAME record to point mydomain.com to the load balancer, and create two A records to point WWW and HOME to mydomain.com respectively.
• B. Create one CNAME record to point mydomain.com to the load balancer, and create two AAAA records to point WWW and HOME to mydomain.com respectively.
• C. Create one A record to point mydomain.com to the load balancer, and create two CNAME records to point WWW and HOME to mydomain.com respectively.
• D. Create one A record to point mydomain.com to the load balancer, and create two NS records to point WWW and HOME to mydomain.com respectively.

Correct Answer: B

Community vote distribution

C (100%)

Question #206

You have two subnets (subnet-a and subnet-b) in the default VPC. Your database servers are running in subnet-a. Your application servers and web servers are running in subnet-b. You want to configure a firewall rule that only allows database traffic from the application servers to the database servers. What should you do?

• A. • Create service accounts sa-app and sa-db.• Associate service account sa-app with the application servers and the service account sa-db with the database servers.• Create an ingress firewall rule to allow network traffic from source service account sa-app to target service account sa-db.
• B. • Create network tags app-server and db-server.• Add the app-server tag to the application servers and the db-server tag to the database servers.• Create an egress firewall rule to allow network traffic from source network tag app-server to target network tag db-server.
• C. • Create a service account sa-app and a network tag db-server.• Associate the service account sa-app with the application servers and the network tag db-server with the database servers.• Create an ingress firewall rule to allow network traffic from source VPC IP addresses and target the subnet-a IP addresses.
• D. • Create a network tag app-server and service account sa-db.• Add the tag to the application servers and associate the service account with the database servers.• Create an egress firewall rule to allow network traffic from source network tag app-server to target service account sa-db.

Correct Answer: B

Community vote distribution

A (60%)

B (40%)

Question #207

Your team wants to deploy a specific content management system (CMS) solution to Google Cloud. You need a quick and easy way to deploy and install the solution. What should you do?

• A. Search for the CMS solution in Google Cloud Marketplace. Use gcloud CLI to deploy the solution.
• B. Search for the CMS solution in Google Cloud Marketplace. Deploy the solution directly from Cloud Marketplace.
• C. Search for the CMS solution in Google Cloud Marketplace. Use Terraform and the Cloud Marketplace ID to deploy the solution with the appropriate parameters.
• D. Use the installation guide of the CMS provider. Perform the installation through your configuration management system.

Correct Answer: C

Community vote distribution

B (100%)

Question #208

You are working for a startup that was officially registered as a business 6 months ago. As your customer base grows, your use of Google Cloud increases. You want to allow all engineers to create new projects without asking them for their credit card information. What should you do?

• A. Create a Billing account, associate a payment method with it, and provide all project creators with permission to associate that billing account with their projects.
• B. Grant all engineers permission to create their own billing accounts for each new project.
• C. Apply for monthly invoiced billing, and have a single invoice for the project paid by the finance team.
• D. Create a billing account, associate it with a monthly purchase order (PO), and send the PO to Google Cloud.

Correct Answer: A

Community vote distribution

A (100%)

Question #209

Your continuous integration and delivery (CI/CD) server can’t execute Google Cloud actions in a specific project because of permission issues. You need to validate whether the used service account has the appropriate roles in the specific project.

What should you do?

• A. Open the Google Cloud console, and check the Identity and Access Management (IAM) roles assigned to the service account at the project or inherited from the folder or organization levels.
• B. Open the Google Cloud console, and check the organization policies.
• C. Open the Google Cloud console, and run a query to determine which resources this service account can access.
• D. Open the Google Cloud console, and run a query of the audit logs to find permission denied errors for this service account.

Correct Answer: A

Community vote distribution

A (80%)

C (20%)

Question #210

Your team is using Linux instances on Google Cloud. You need to ensure that your team logs in to these instances in the most secure and cost efficient way. What should you do?

• A. Attach a public IP to the instances and allow incoming connections from the internet on port 22 for SSH.
• B. Use the gcloud compute ssh command with the –tunnel-through-iap flag. Allow ingress traffic from the IP range 35.235.240.0/20 on port 22.
• C. Use a third party tool to provide remote access to the instances.
• D. Create a bastion host with public internet access. Create the SSH tunnel to the instance through the bastion host.

Correct Answer: D

Community vote distribution

B (90%)

 

Question #211

An external member of your team needs list access to compute images and disks in one of your projects. You want to follow Google-recommended practices when you grant the required permissions to this user. What should you do?

• A. Create a custom role, and add all the required compute.disks.list and compute.images.list permissions as includedPermissions. Grant the custom role to the user at the project level.
• B. Create a custom role based on the Compute Image User role. Add the compute.disks.list to the includedPermissions field. Grant the custom role to the user at the project level.
• C. Create a custom role based on the Compute Storage Admin role. Exclude unnecessary permissions from the custom role. Grant the custom role to the user at the project level.
• D. Grant the Compute Storage Admin role at the project level.

Correct Answer: A

Community vote distribution

A (62%)

B (23%)

C (15%)

Question #212

You are running a web application on Cloud Run for a few hundred users. Some of your users complain that the initial web page of the application takes much longer to load than the following pages. You want to follow Google’s recommendations to mitigate the issue. What should you do?

• A. Set the minimum number of instances for your Cloud Run service to 3.
• B. Set the concurrency number to 1 for your Cloud Run service.
• C. Set the maximum number of instances for your Cloud Run service to 100.
• D. Update your web application to use the protocol HTTP/2 instead of HTTP/1.1.

Correct Answer: A

Community vote distribution

A (75%)

D (25%)

Question #213

You are building a data lake on Google Cloud for your Internet of Things (IoT) application. The IoT application has millions of sensors that are constantly streaming structured and unstructured data to your backend in the cloud. You want to build a highly available and resilient architecture based on Google-recommended practices. What should you do?

• A. Stream data to Pub/Sub, and use Dataflow to send data to Cloud Storage.
• B. Stream data to Pub/Sub, and use Storage Transfer Service to send data to BigQuery.
• C. Stream data to Dataflow, and use Dataprep by Trifacta to send data to Bigtable.
• D. Stream data to Dataflow, and use Storage Transfer Service to send data to BigQuery.

Correct Answer: A

Community vote distribution

A (100%)

Question #214

You are running out of primary internal IP addresses in a subnet for a custom mode VPC. The subnet has the IP range 10.0.0.0/20, and the IP addresses are primarily used by virtual machines in the project. You need to provide more IP addresses for the virtual machines. What should you do?

• A. Add a secondary IP range 10.1.0.0/20 to the subnet.
• B. Change the subnet IP range from 10.0.0.0/20 to 10.0.0.0/18.
• C. Change the subnet IP range from 10.0.0.0/20 to 10.0.0.0/22.
• D. Convert the subnet IP range from IPv4 to IPv6.

Correct Answer: A

Community vote distribution

B (70%)

A (30%)

Question #215

Your company requires all developers to have the same permissions, regardless of the Google Cloud project they are working on. Your company’s security policy also restricts developer permissions to Compute Engine, Cloud Functions, and Cloud SQL. You want to implement the security policy with minimal effort. What should you do?

• A. • Create a custom role with Compute Engine, Cloud Functions, and Cloud SQL permissions in one project within the Google Cloud organization.• Copy the role across all projects created within the organization with the gcloud iam roles copy command.• Assign the role to developers in those projects.
• B. • Add all developers to a Google group in Google Groups for Workspace.• Assign the predefined role of Compute Admin to the Google group at the Google Cloud organization level.
• C. • Add all developers to a Google group in Cloud Identity.• Assign predefined roles for Compute Engine, Cloud Functions, and Cloud SQL permissions to the Google group for each project in the Google Cloud organization.
• D. • Add all developers to a Google group in Cloud Identity.• Create a custom role with Compute Engine, Cloud Functions, and Cloud SQL permissions at the Google Cloud organization level.• Assign the custom role to the Google group.

Correct Answer: D

Community vote distribution

D (75%)

C (25%)

Question #216

You are working for a hospital that stores its medical images in an on-premises data room. The hospital wants to use Cloud Storage for archival storage of these images. The hospital wants an automated process to upload any new medical images to Cloud Storage. You need to design and implement a solution. What should you do?

• A. Create a Pub/Sub topic, and enable a Cloud Storage trigger for the Pub/Sub topic. Create an application that sends all medical images to the Pub/Sub topic.
• B. Create a script that uses the gcloud storage command to synchronize the on-premises storage with Cloud Storage, Schedule the script as a cron job.
• C. Create a Pub/Sub topic, and create a Cloud Function connected to the topic that writes data to Cloud Storage. Create an application that sends all medical images to the Pub/Sub topic.
• D. In the Google Cloud console, go to Cloud Storage. Upload the relevant images to the appropriate bucket.

Correct Answer: B

Community vote distribution

B (70%)

C (30%)

Question #217

Your company has an internal application for managing transactional orders. The application is used exclusively by employees in a single physical location. The application requires strong consistency, fast queries, and ACID guarantees for multi-table transactional updates. The first version of the application is implemented in PostgreSQL, and you want to deploy it to the cloud with minimal code changes. Which database is most appropriate for this application?

• A. Bigtable
• B. BigQuery
• C. Cloud SQL
• D. Firestore

Correct Answer: C

Community vote distribution

C (100%)

Question #218

Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?

• A. Create an Instance Template with Spot VMs On. Create a Managed Instance Group from the template and adjust Target CPU Utilization. Migrate the workload.
• B. Migrate the workload to a Compute Engine VM. Start and stop the instance as needed.
• C. Migrate the workload to a Google Kubernetes Engine cluster with Spot nodes.
• D. Migrate the workload to a Compute Engine Spot VM.

Correct Answer: A

Community vote distribution

B (100%)

Question #219

You are planning to migrate the following on-premises data management solutions to Google Cloud:

• One MySQL cluster for your main database

• Apache Kafka for your event streaming platform

• One Cloud SQL for PostgreSQL database for your analytical and reporting needs

You want to implement Google-recommended solutions for the migration. You need to ensure that the new solutions provide global scalability and require minimal operational and infrastructure management. What should you do?

• A. Migrate from MySQL to Cloud SQL, from Kafka to Pub/Sub, and from Cloud SQL for PostgreSQL to BigQuery.
• B. Migrate from MySQL to Cloud Spanner, from Kafka to Pub/Sub, and from Cloud SQL for PostgreSQL to BigQuery.
• C. Migrate from MySQL to Cloud Spanner, from Kafka to Memorystore, and from Cloud SQL for PostgreSQL to Cloud SQL.
• D. Migrate from MySQL to Cloud SQL, from Kafka to Memorystore, and from Cloud SQL for PostgreSQL to Cloud SQL.

Correct Answer: A

Community vote distribution

B (100%)