Questions and Answers
What is the optimal method for managing SSH access for a team responsible for Compute Engine instances?
Which role should be granted to a Google group for members who need administrative access to instances?
What is a critical concern for the security team when managing SSH keys for instances?
What is the primary advantage of allowing project-wide public SSH keys?
Signup and view all the answers
When creating a custom VPC with a single subnet, what is the desired range to use for maximum capacity?
Signup and view all the answers
What type of configuration management tool can automate the deployment of SSH keys across instances?
Signup and view all the answers
Why is it important for individual team members to generate their own SSH key pairs?
Signup and view all the answers
Which of the following is a disadvantage of using a single shared SSH key for all team members?
Signup and view all the answers
Which method should you use to follow Google's recommended practices for specifying configurations?
Signup and view all the answers
What is the correct approach to deploy a Dockerfile on Kubernetes Engine?
Signup and view all the answers
What is the fastest way to set up a new Jenkins server for your project?
Signup and view all the answers
Which command should you use to update a deployment in Deployment Manager without downtime?
Signup and view all the answers
For deploying a Jenkins server with minimal steps, which option is the least efficient?
Signup and view all the answers
Which method allows automatic deployment configurations in Google Cloud?
Signup and view all the answers
What must you do to ensure a seamless update of a deployment in Deployment Manager?
Signup and view all the answers
Which deployment strategy is best for quick setups in Google Cloud?
Signup and view all the answers
What is the most effective way to determine why an App Engine application did not deploy to the intended project?
Signup and view all the answers
To ensure 10 Compute Engine instances automatically restart if they crash and remain highly available during maintenance, what setting should be configured?
Signup and view all the answers
What key feature should be used for the instances to maintain availability even during maintenance events?
Signup and view all the answers
Which option is NOT required when configuring an instance template for handling crashes in Compute Engine?
Signup and view all the answers
Which configuration minimizes downtime for Compute Engine instances during system maintenance?
Signup and view all the answers
Which command helps to verify the Google Cloud configuration for App Engine deployment?
Signup and view all the answers
For a Compute Engine instance to automatically recover from crashes, which health condition must be set?
Signup and view all the answers
What happens to an instance if 'On-host maintenance' is set to Terminate?
Signup and view all the answers
What user role should be assigned to the group for BigQuery access?
Signup and view all the answers
What is the main task involved in enabling communication between tiers in the given scenario?
Signup and view all the answers
Which tier must communicate with tier #2 in the described infrastructure?
Signup and view all the answers
In the recommended firewall rule, what should the source filter be for the communication from tier #1 to tier #2?
Signup and view all the answers
What protocol needs to be allowed for communication between tier #2 and tier #3?
Signup and view all the answers
What is the main purpose of the service accounts assigned to each tier?
Signup and view all the answers
If you want to restrict tier #2's communication to only tier #3, which configuration should you ensure?
Signup and view all the answers
What additional adjustment might be necessary for the firewall rules in a secure environment?
Signup and view all the answers
What is the purpose of creating a custom route advertisement using Cloud Router?
Signup and view all the answers
What is the recommended practice for processing messages from a Cloud Pub/Sub topic on Cloud Run?
Signup and view all the answers
Which option best minimizes costs when deploying a low-traffic containerized application?
Signup and view all the answers
How should you configure a DNS server in your on-premises network for *.googleapis.com?
Signup and view all the answers
What is the initial step to take for creating a Cloud Pub/Sub subscription for a Cloud Run application?
Signup and view all the answers
Which deployment option utilizes Kubernetes for processing Pub/Sub messages effectively?
Signup and view all the answers
In a scenario where you have deployed an application on Cloud Run, what role must be assigned to the service account used by Cloud Run?
Signup and view all the answers
What configuration should be avoided when deploying a low-frequency HTTP endpoint application?
Signup and view all the answers
Study Notes
Google Cloud Practice Test Highlights
-
Google Account Access Management: Grant the
compute.osAdminLogin
role to Google group members for SSH access, allowing individual public key management. - Custom VPC Creation: Use Deployment Manager to create a custom VPC with a single large subnet, adhering to Google's best practices.
-
Kubernetes Deployment: Deploy a Dockerfile by creating a Docker image, uploading it to Container Registry, and using a Deployment YAML file along with
kubectl
. - Jenkins Server Deployment: Simplest deployment of Jenkins server is through GCP Marketplace, enabling quick setup with minimal steps.
- Deployment Manager Updates: To avoid downtime, use the specific command for rolling updates in Deployment Manager.
-
App Engine Deployment Analysis: For deployment issues, check Google Cloud configuration with the
gcloud config list
command in Cloud Shell. -
Compute Engine Instance Configuration: For high availability with automatic restart during maintenance, use instance groups with
Autohealing
health checks configured. - Service Account Communication: Establish TCP communication between different tiers in Compute Engine through specific ingress firewall rules targeting service accounts.
-
Cloud Run and Pub/Sub Integration: For Cloud Run applications processing Pub/Sub messages, grant the service account the
Cloud Run Invoker
role and create a subscription that uses this service account as the push endpoint. - Cost-Effective Application Deployment: For minimal cost applications with low HTTP request traffic, deploy on Cloud Run instead of GKE or App Engine Flexible.
Studying That Suits You
Use AI to generate personalized quizzes and flashcards to suit your learning preferences.
Description
Prepare for the Google Associate Cloud Engineer certification with these practice tests. This quiz covers essential concepts and scenarios related to managing Compute Engine instances efficiently and securely within a company. Test your knowledge and readiness for the certification exam.