Associate Cloud Engineer Sample Questions

Your organization plans to migrate its financial transaction monitoring application to Google Cloud. Auditors need to view the data and run reports in BigQuery, but they are not allowed to perform transactions in the application. You are leading the migration and want the simplest solution that will require the least amount of maintenance. What should you do?

• A. Assign roles/bigquery.dataViewer to the individual auditors.
• B. Create a group for auditors and assign roles/viewer to them.
• C. Create a group for auditors, and assign roles/bigquery.dataViewer to them.
• D. Assign a custom role to each auditor that allows view-only access to BigQuery.

You are managing your company’s first Google Cloud project. Project leads, developers, and internal testers will participate in the project, which includes sensitive information. You need to ensure that only specific members of the development team have access to sensitive information. You want to assign the appropriate Identity and Access Management (IAM) roles that also require the least amount of maintenance. What should you do?

• A. Assign a basic role to each user.
• B. Create groups. Assign a basic role to each group, and then assign users to groups.
• C. Create groups. Assign a Custom role to each group, including those who should have access to sensitive data. Assign users to groups.
• D. Create groups. Assign an IAM Predefined role to each group as required, including those who should have access to sensitive data. Assign users to groups.

You are responsible for monitoring all changes in your Cloud Storage and Firestore instances. For each change, you need to invoke an action that will verify the compliance of the change in near real time. You want to accomplish this with minimal setup. What should you do?

• A. Use the trigger mechanism in each datastore to invoke the security script.
• B. Use Cloud Function events, and call the security script from the Cloud Function triggers.
• C. Redirect your data-changing queries to an App Engine application, and call the security script from the application.
• D. Use a Python script to get logs of the datastores, analyze them, and invoke the security script.

Your application needs to process a significant rate of transactions. The rate of transactions exceeds the processing capabilities of a single virtual machine (VM). You want to spread transactions across multiple servers in real time and in the most cost-effective manner. What should you do?

• A. Send transactions to BigQuery. On the VMs, poll for transactions that do not have the ‘processed’ key, and mark them ‘processed’ when done.
• B. Set up Cloud SQL with a memory cache for speed. On your multiple servers, poll for transactions that do not have the ‘processed’ key, and mark them ‘processed’ when done.
• C. Send transactions to Pub/Sub. Process them in VMs in a managed instance group.
• D. Record transactions in Cloud Bigtable, and poll for new transactions from the VMs.

Your team needs to directly connect your on-premises resources to several virtual machines inside a virtual private cloud (VPC). You want to provide your team with fast and secure access to the VMs with minimal maintenance and cost. What should you do?

• A. Set up Cloud Interconnect.
• B. Use Cloud VPN to create a bridge between the VPC and your network.
• C. Assign a public IP address to each VM, and assign a strong password to each one.
• D. Start a Compute Engine VM, install a software router, and create a direct tunnel to each VM.

You are implementing Cloud Storage for your organization. You need to follow your organization’s regulations. They include: 1) Archive data older than one year. 2) Delete data older than 5 years. 3) Use standard storage for all other data. You want to implement these guidelines automatically and in the simplest manner available. What should you do?

• A. Set up Object Lifecycle management policies.
• B. Run a script daily. Copy data that is older than one year to an archival bucket, and delete five-year-old data.
• C. Run a script daily. Set storage class to ARCHIVE for data that is older than one year, and delete five-year-old data.
• D. Set up default storage class for three buckets named: STANDARD, ARCHIVE, DELETED. Use a script to move the data in the appropriate bucket when its condition matches your company guidelines.

You are creating a Cloud IOT application requiring data storage of up to 10 petabytes (PB). The application must support high-speed reads and writes of small pieces of data, but your data schema is simple. You want to use the most economical solution for data storage. What should you do?

• A. Store the data in Cloud Spanner, and add an in-memory cache for speed.
• B. Store the data in Cloud Storage, and distribute the data through Cloud CDN for speed.
• C. Store the data in Cloud Bigtable, and implement the business logic in the programming language of your choice.
• D. Use BigQuery, and implement the business logic in SQL.

You have created a Kubernetes deployment on Google Kubernetes Engine (GKE) that has a backend service. You also have pods that run the frontend service. You want to ensure that there is no interruption in communication between your frontend and backend service pods if they are moved or restarted. What should you do?

• A. Create a service that groups your pods in the backend service, and tell your frontend pods to communicate through that service.
• B. Create a DNS entry with a fixed IP address that the frontend service can use to reach the backend service.
• C. Assign static internal IP addresses that the frontend service can use to reach the backend pods.
• D. Assign static external IP addresses that the frontend service can use to reach the backend pods.

You are responsible for the user-management service for your global company. The service will add, update, delete, and list addresses. Each of these operations is implemented by a Docker container microservice. The processing load can vary from low to very high. You want to deploy the service on Google Cloud for scalability and minimal administration. What should you do?

• A. Deploy your Docker containers into Cloud Run.
• B. Start each Docker container as a managed instance group.
• C. Deploy your Docker containers into Google Kubernetes Engine.
• D. Combine the four microservices into one Docker image, and deploy it to the App Engine instance.

You provide a service that you need to open to everyone in your partner network. You have a server and an IP address where the application is located. You do not want to have to change the IP address on your DNS server if your server crashes or is replaced. You also want to avoid downtime and deliver a solution for minimal cost and setup. What should you do?

• A. Create a script that updates the IP address for the domain when the server crashes or is replaced.
• B. Reserve a static internal IP address, and assign it using Cloud DNS.
• C. Reserve a static external IP address, and assign it using Cloud DNS.
• D. Use the Bring Your Own IP (BYOIP) method to use your own IP address.