LATIHAN ACE 2

Everyone in your company has a Google account. Your operations team is in charge of a large number of Compute Engine instances. This team's members only require server administrative access. Your security team wants to ensure that the credential allocation process is efficient, and they need to be able to identify who has accessed a specific instance. What course of action should be taken?

• • A. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key in the metadata of each instance.

• • B. Ask each member of the team to generate a new SSH key pair and to send you their public key. Use a configuration management tool to deploy those keys on each instance.

• • C. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account. Grant the compute.osAdminLogin role to the Google group corresponding to this team.

• D. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance.

Answer explanation

https://cloud.google.com/compute/docs/instances/adding-removing-ssh-keys

Your company has paid a third party for a threat detection service and has asked you to upload all network logs to the application. Which of the following services will best meet your needs?

• Flow Logs

• System Logs

• Activity Logs

• Network Logs

Answer explanation

Flow logs capture each and every packet flowing within your network.

You have multiple gcloud configurations. You want to go over the configured Kubernetes Engine cluster of an inactive configuration in as few steps as possible. What are your options?

• • A. Use gcloud config configurations describe to review the output.

• • B. Use gcloud config configurations activate and gcloud config list to review the output.

• • C. Use kubectl config get-contexts to review the output.

• D. Use kubectl config use-context and kubectl config view to review the output.

Answer explanation

If we executed "kubectl config get-contexts" code, Output will be, CURRENT NAME | NAMESPACE | CLUSTER | AUTHINFO

You require a dynamic method for provisioning VMs on Compute Engine. The precise specifications will be contained in a separate configuration file. You want to adhere to Google's best practices. Which approach should you take?

• 
  Cloud Composer

• Managed Instance Group

• Unmanaged Instance Group

• Deployment Manager

Your client hosts a static website written in HTML, CSS, and JavaScript on Cloud Storage. The site is aimed at users in North America. The website's popularity has grown worldwide, with hundreds of thousands of visitors visiting each month. Visitors from various parts of the world report slow performance due to latency, whereas users in the United States report normal response times. What service can help with this problem?

• Cloud CDN

• Storage Caching

• Load Balancer

• Cloud DNS

You have a development project with defined IAM roles. You are creating a production project and want the same IAM roles on the new project with as few steps as possible. What are your options?

• A. Use gcloud iam roles copy and specify the production project as the destination project.

• • B. Use gcloud iam roles copy and specify your organization as the destination organization.

• • C. In the Google Cloud Platform Console, use the 'create role from role' functionality.

• • D. In the Google Cloud Platform Console, use the 'create role' functionality and select all applicable permissions.

Answer explanation

https://cloud.google.com/sdk/gcloud/reference/iam/roles/copy

You've been asked to create a custom role for one of your colleagues who needs access to deploy an application to the App Engine in a financial company's Cloud & DevOps department. Which permission are you going to use?

• 
  App Engine Editor

• App Engine Admin

• App Engine Deployer

• App Engine Viewer

As a cloud engineer, you have been asked to upgrade your account's free trial and rename it to a production-inventory-system. While making the changes, you receive a permission denied error. Which of the following permissions will address the issue?

• billing.accounts.update

• 
  billing.account.upgrade

• 
  billing.account.update

• billing.accounts.upgrade

For their project, your development team requires a new Jenkins server. You must deploy the server in as few steps as possible. What are your options?

• Use GCP Marketplace to launch the Jenkins solution

• Create a Kubernetes cluster on Compute Engine and create a deployment with the Jenkins Docker image.

• Create a new Compute Engine instance and install Jenkins through the command line interface.

• Download and deploy the Jenkins Java WAR to App Engine Standard.

Your client wants to migrate an application to Google Cloud which has 15 TB of relational data. The database is growing rapidly by 10 GB every day. In addition, to support the traffic, at least 10 read replicas are required. Which of the following services would you meet the requirements?

• BigQuery

• Cloud Storage

• Cloud Spanner

• Cloud Bigtable