CertyIQ - GACE - pt 8

You will have several applications running on different Compute Engine instances in the same project. You want to specify at a more granular level the service account each instance uses when calling Google Cloud APIs. What should you do?

• When creating the instances, specify a Service Account for each instance

• When creating the instances, assign the name of each Service Account as instance metadata.

• After starting the instances, use gcloud compute instances update to specify a Service Account for each instance.

• After starting the instances, use gcloud compute instances update to assign the name of the relevant Service Account as instance metadata.

You are creating an application that will run on Google Kubernetes Engine. You have identified MongoDB as the most suitable database system for your application and want to deploy a managed MongoDB environment that provides a support SLA. What should you do?

• Create a Cloud Bigtable cluster, and use the HBase API.

• Deploy MongoDB Atlas from the Google Cloud Marketplace.

• Download a MongoDB installation package, and run it on Compute Engine instances.

• Download a MongoDB installation package, and run it on a Managed Instance Group.

You are managing a project for the Business Intelligence (BI) department in your company. A data pipeline ingests data into BigQuery via streaming. You want the users in the BI department to be able to run the custom SQL queries against the latest data in BigQuery. What should you do?

• Create a Data Studio dashboard that uses the related BigQuery tables as a source and give the BI team view access to the Data Studio dashboard.

• Create a Service Account for the BI team and distribute a new private key to each member of the BI team.

• Use Cloud Scheduler to schedule a batch Dataflow job to copy the data from BigQuery to the BI team's internal data warehouse.

• Assign the IAM role of BigQuery User to a Google Group that contains the members of the BI team.

Your company is moving its entire workload to Compute Engine. Some servers should be accessible through the Internet, and other servers should only be accessible over the internal network. All servers need to be able to talk to each other over specific ports and protocols. The current on-premises network relies on a demilitarized zone (DMZ) for the public servers and a Local Area Network (LAN) for the private servers. You need to design the networking infrastructure on Google Cloud to match these requirements. What should you do?

• 1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.

• 1. Create a single VPC with a subnet for the DMZ and a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.

• 1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public ingress traffic for the DMZ.

• 1. Create a VPC with a subnet for the DMZ and another VPC with a subnet for the LAN. 2. Set up firewall rules to open up relevant traffic between the DMZ and the LAN subnets, and another firewall rule to allow public egress traffic for the DMZ.

You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance. What should you do?

• Enable the Cloud Spanner API.

• Configure your Cloud Spanner instance to be multi-regional.

• Create a new VPC network with subnetworks in all desired regions.

• Grant yourself the IAM role of Cloud Spanner Admin.

You have created a new project in Google Cloud through the gcloud command line interface (CLI) and linked a billing account. You need to create a new Compute Engine instance using the CLI. You need to perform the prerequisite steps. What should you do?

• Create a Cloud Monitoring Workspace.

• Create a VPC network in the project.

• Enable the compute googleapis.com API.

• Grant yourself the IAM role of Computer Admin.

Your company has developed a new application that consists of multiple microservices. You want to deploy the application to Google Kubernetes Engine (GKE), and you want to ensure that the cluster can scale as more applications are deployed in the future. You want to avoid manual intervention when each new application is deployed. What should you do?

• Deploy the application on GKE, and add a HorizontalPodAutoscaler to the deployment.

• Deploy the application on GKE, and add a VerticalPodAutoscaler to the deployment.

• Create a GKE cluster with autoscaling enabled on the node pool. Set a minimum and maximum for the size of the node pool.

• Create a separate node pool for each application, and deploy each application to its dedicated node pool.

You need to manage a third-party application that will run on a Compute Engine instance. Other Compute Engine instances are already running with default configuration. Application installation files are hosted on Cloud Storage. You need to access these files from the new instance without allowing other virtual machines (VMs) to access these files. What should you do?

• Create the instance with the default Compute Engine service account. Grant the service account permissions on Cloud Storage.

• Create the instance with the default Compute Engine service account. Add metadata to the objects on Cloud Storage that matches the metadata on the new instance

• Create a new service account and assign this service account to the new instance. Grant the service account permissions on Cloud Storage.

• Create a new service account and assign this service account to the new instance. Add metadata to the objects on Cloud Storage that matches the metadata on the new instance.

You need to configure optimal data storage for files stored in Cloud Storage for minimal cost. The files are used in a mission-critical analytics pipeline that is used continually. The users are in Boston, MA (United States). What should you do?

• Configure regional storage for the region closest to the users. Configure a Nearline storage class.

• Configure regional storage for the region closest to the users. Configure a Standard storage class.

• Configure dual-regional storage for the dual region closest to the users. Configure a Nearline storage class.

• Configure dual-regional storage for the dual region closest to the users. Configure a Standard storage class.

You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do?

• Deploy the application on App Engine. For each update, create a new version of the same service. Configure traffic splitting to send a small percentage of traffic to the new version.

• Deploy the application on App Engine. For each update, create a new service. Configure traffic splitting to send a small percentage of traffic to the new service.

• Deploy the application on Kubernetes Engine. For a new release, update the deployment to use the new version.

• Deploy the application on Kubernetes Engine. For a new release, create a new deployment for the new version. Update the service to use the new deployment.