GCP_ACE set C

You've deployed a microservice called myapp1 to a Google Kubernetes Engine cluster using the YAML file specified below: You need to refactor this configuration so that the database password is not stored in plain text. You want to follow Google-recommended practices. What should you do?

• A. Store the database password inside the Docker image of the container, not in the YAML file.
• B. Store the database password inside a Secret object. Modify the YAML file to populate the DB_PASSWORD environment variable from the Secret.
• C. Store the database password inside a ConfigMap object. Modify the YAML file to populate the DB_PASSWORD environment variable from the ConfigMap.
• D. Store the database password in a file inside a Kubernetes persistent volume, and use a persistent volume claim to mount the volume to the container.

You have 32 GB of data in a single file that you need to upload to a Nearline Storage bucket. The WAN connection you are using is rated at 1 Gbps, and you are the only one on the connection. You want to use as much of the rated 1 Gbps as possible to transfer the file rapidly. How should you upload the file?

• A. Use the GCP Console to transfer the file instead of gsutil.
• B. Enable parallel composite uploads using gsutil on the file transfer.
• C. Decrease the TCP window size on the machine initiating the transfer.
• D. Change the storage class of the bucket from Nearline to Multi-Regional.

You have an instance group that you want to load balance. You want the load balancer to terminate the client SSL session. The instance group is used to serve a public web application over HTTPS. You want to follow Google-recommended practices. What should you do?

• A. Configure an HTTP(S) load balancer.
• B. Configure an internal TCP load balancer.
• C. Configure an external SSL proxy load balancer.
• D. Configure an external TCP proxy load balancer.

You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?

• A. Enable the Node Auto-Repair feature for your GKE cluster.
• B. Enable the Node Auto-Upgrades feature for your GKE cluster.
• C. Select the latest available cluster version for your GKE cluster.
• D. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.

You need to grant access for three users so that they can view and edit table data on a Cloud Spanner instance. What should you do?

• A. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to the role.
• B. Run gcloud iam roles describe roles/spanner.databaseUser. Add the users to a new group. Add the group to the role.
• C. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to the role.
• D. Run gcloud iam roles describe roles/spanner.viewer - -project my-project. Add the users to a new group. Add the group to the role.

You created a Google Cloud Platform project with an App Engine application inside the project. You initially configured the application to be served from the us- central region. Now you want the application to be served from the asia-northeast1 region. What should you do?

• A. Change the default region property setting in the existing GCP project to asia-northeast1.
• B. Change the region property setting in the existing App Engine application from us-central to asia-northeast1.
• C. Create a second App Engine application in the existing GCP project and specify asia-northeast1 as the region to serve your application.
• D. Create a new GCP project and create an App Engine application inside this new project. Specify asia-northeast1 as the region to serve your application.

You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called proj-vm. What should you do?

• A. Download the private key from the service account, and add it to each VMs custom metadata.
• B. Download the private key from the service account, and add the private key to each VM's SSH keys.
• C. Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
• D. When creating the VMs, set the service account's API scope for Compute Engine to read/write.

You need to create a new billing account and then link it with an existing Google Cloud Platform project. What should you do?

• A. Verify that you are Project Billing Manager for the GCP project. Update the existing project to link it to the existing billing account.
• B. Verify that you are Project Billing Manager for the GCP project. Create a new billing account and link the new billing account to the existing project.
• C. Verify that you are Billing Administrator for the billing account. Create a new project and link the new project to the existing billing account.
• D. Verify that you are Billing Administrator for the billing account. Update the existing project to link it to the existing billing account.

You want to verify the IAM users and roles assigned within a GCP project named my-project. What should you do?

• A. Run gcloud iam roles list. Review the output section.
• B. Run gcloud iam service-accounts list. Review the output section.
• C. Navigate to the project and then to the IAM section in the GCP Console. Review the members and roles.
• D. Navigate to the project and then to the Roles section in the GCP Console. Review the roles and status.

You are deploying an application to a Compute Engine VM in a managed instance group. The application must be running at all times, but only a single instance of the VM should run per GCP project. How should you configure the instance group?

• A. Set autoscaling to On, set the minimum number of instances to 1, and then set the maximum number of instances to 1.
• B. Set autoscaling to Off, set the minimum number of instances to 1, and then set the maximum number of instances to 1.
• C. Set autoscaling to On, set the minimum number of instances to 1, and then set the maximum number of instances to 2.
• D. Set autoscaling to Off, set the minimum number of instances to 1, and then set the maximum number of instances to 2.