G-ACE - Part 12

You want to permanently delete a Pub/Sub topic managed by Config Connector in your Google Cloud project. What should you do?

• Use kubectl to create the label deleted-by-cnrm and to change its value to true for the topic resource.

• Use kubectl to delete the topic resource.

• Use gcloud CLI to delete the topic.

• Use gcloud CLI to update the topic label managed-by-cnrm to false.

Your company is using Google Workspace to manage employee accounts. Anticipated growth will increase the number of personnel from 100 employees to 1,000 employees within 2 years. Most employees will need access to your company’s Google Cloud account. The systems and processes will need to support 10x growth without performance degradation, unnecessary complexity, or security issues. What should you do?

• Migrate the users to Active Directory. Connect the Human Resources system to Active Directory. Turn on Google Cloud Directory Sync (GCDS) for Cloud Identity. Turn on Identity Federation from Cloud Identity to Active Directory.

• Organize the users in Cloud Identity into groups. Enforce multi-factor authentication in Cloud Identity.

• Turn on identity federation between Cloud Identity and Google Workspace. Enforce multi-factor authentication for domain wide delegation.

• Use a third-party identity provider service through federation. Synchronize the users from Google Workplace to the third-party provider in real time.

You want to host your video encoding software on Compute Engine. Your user base is growing rapidly, and users need to be able to encode their videos at any time without interruption or CPU limitations. You must ensure that your encoding solution is highly available, and you want to follow Google-recommended practices to automate operations. What should you do?

• Deploy your solution on multiple standalone Compute Engine instances, and increase the number of existing instances when CPU utilization on Cloud Monitoring reaches a certain threshold.

• Deploy your solution on multiple standalone Compute Engine instances, and replace existing instances with high-CPU instances when CPU utilization on Cloud Monitoring reaches a certain threshold.

• Deploy your solution to an instance group, and increase the number of available instances whenever you see high CPU utilization in Cloud Monitoring.

• Deploy your solution to an instance group, and set the autoscaling based on CPU utilization.

You are using Looker Studio to visualize a table from your data warehouse that is built on top of BigQuery. Data is appended to the data warehouse during the day. At night, the daily summary is recalculated by overwriting the table. You just noticed that the charts in Looker Studio are broken, and you want to analyze the problem. What should you do?

• In Cloud Logging, create a filter for your Looker Studio report.

• Use the open source CLI tool, Snapshot Debugger, to find out why the data was not refreshed correctly.

• Review the Error Reporting page in the Google Cloud console to find any errors.

• Use the BigQuery interface to review the nightly job and look for any errors.

You recently received a new Google Cloud project with an attached billing account where you will work. You need to create instances, set firewalls, and store data in Cloud Storage. You want to follow Google-recommended practices. What should you do?

• Use the gcloud CLI services enable cloudresourcemanager.googleapis.com command to enable all resources.

• Use the gcloud services enable compute.googleapis.com command to enable Compute Engine and the gcloud services enable storage-api.googleapis.com command to enable the Cloud Storage APIs.

• Open the Google Cloud console and enable all Google Cloud APIs from the API dashboard.

• Open the Google Cloud console and run gcloud init --project in a Cloud Shell.

Your application development team has created Docker images for an application that will be deployed on Google Cloud. Your team does not want to manage the infrastructure associated with this application. You need to ensure that the application can scale automatically as it gains popularity. What should you do?

• Create an instance template with the container image, and deploy a Managed Instance Group with Autoscaling.

• Upload Docker images to Artifact Registry, and deploy the application on Google Kubernetes Engine using Standard mode.

• Upload Docker images to the Cloud Storage, and deploy the application on Google Kubernetes Engine using Standard mode.

• Upload Docker images to Artifact Registry, and deploy the application on Cloud Run.

You are migrating a business critical application from your local data center into Google Cloud. As part of your high-availability strategy, you want to ensure that any data used by the application will be immediately available if a zonal failure occurs. What should you do?

• Store the application data on a zonal persistent disk. Create a snapshot schedule for the disk. If an outage occurs, create a new disk from the most recent snapshot and attach it to a new VM in another zone.

• Store the application data on a zonal persistent disk. If an outage occurs, create an instance in another zone with this disk attached.

• Store the application data on a regional persistent disk. Create a snapshot schedule for the disk. If an outage occurs, create a new disk from the most recent snapshot and attach it to a new VM in another zone.

• Store the application data on a regional persistent disk. If an outage occurs, create an instance in another zone with this disk attached.

The DevOps group in your organization needs full control of Compute Engine resources in your development project. However, they should not have permission to create or update any other resources in the project. You want to follow Google’s recommendations for setting permissions for the DevOps group. What should you do?

• Grant the basic role roles/viewer and the predefined role roles/compute.admin to the DevOps group.

• Create an IAM policy and grant all compute.instanceAdmin.* permissions to the policy. Attach the policy to the DevOps group.

• Create a custom role at the folder level and grant all compute.instanceAdmin.* permissions to the role. Grant the custom role to the DevOps group.

• • Grant the basic role roles/editor to the DevOps group.

  Hide Answer
  

Your team is running an on-premises ecommerce application. The application contains a complex set of microservices written in Python, and each microservice is running on Docker containers. Configurations are injected by using environment variables. You need to deploy your current application to a serverless Google Cloud cloud solution. What should you do?

• Use your existing CI/CD pipeline. Use the generated Docker images and deploy them to Cloud Run. Update the configurations and the required endpoints.

• Use your existing continuous integration and delivery (CI/CD) pipeline. Use the generated Docker images and deploy them to Cloud Function. Use the same configuration as on-premises.

• Use the existing codebase and deploy each service as a separate Cloud Function. Update the configurations and the required endpoints.

• Use your existing codebase and deploy each service as a separate Cloud Run. Use the same configurations as on-premises.

You are working in a team that has developed a new application that needs to be deployed on Kubernetes. The production application is business critical and should be optimized for reliability. You need to provision a Kubernetes cluster and want to follow Google-recommended practices. What should you do?

• Create a GKE Autopilot cluster. Enroll the cluster in the rapid release channel.

• Create a GKE Autopilot cluster. Enroll the cluster in the stable release channel.

• Create a zonal GKE standard cluster. Enroll the cluster in the stable release channel.

• • Create a regional GKE standard cluster. Enroll the cluster in the rapid release channel.

  Hide Answer