gcp-cloud-engineer

Your green energy technology company has a project with a single Virtual Private Cloud (VPC) and a single subnetwork in the us-central1 region. A Compute Engine VM instance hosting an application in this subnetwork. You've been tasked to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. What is the best approach?

• To establish connectivity between two subnetworks, first create a new subnetwork within the same VPC in the europe-west1 region. Then, leverage Cloud VPN to interconnect both subnetworks. Finally, deploy the new instance in the newly created subnetwork and configure it to use the private address of the first instance as its endpoint.
• To set up the application, first, establish a VPC and a subnetwork in the europe-west1 region. Second, make the application accessible through an internal load balancer. Finally, deploy the new instance in the new subnetwork and use the load balancer's address as the endpoint.
• To set up the new instance, you need to first generate a subnetwork in europe-west1 within the same VPC. Then, create the instance in the new subnetwork and use the private address of the first instance as the endpoint.
• To complete the task, first, generate a VPC and a subnetwork within the europe-west1 region. Secondly, establish connectivity between the two VPCs. Finally, produce the new instance in the freshly created subnetwork, and make use of the private address of the first instance as the endpoint.
• .

Answer explanation

A meets all requirements using the minimum number of steps.

As an electric vehicle manufacturer, how can we efficiently review the configured Kubernetes Engine cluster of an inactive configuration with the least amount of steps?

• To review the output, make use of the command kubectl config get-contexts.
• To review the output, you can make use of gcloud config configurations activate and gcloud config list.
• To review the output, utilize the command "gcloud config configurations describe".
• To review the output, you can utilize kubectl config view and kubectl config use-context.
• .

Answer explanation

The kubectl config use-context and kubectl config view commands are designed to provide the desired results in the most convenient way possible for accessing and configuring multiple Kubernetes clusters.

What is the most cost-effective solution for storing relational data with point-in-time recovery on Google Cloud for an event ticketing platform company with a small dataset in a single geographical location?

• To configure your instance for high availability, choose Cloud Spanner and set it up as a multi-regional instance.
• Choose Cloud SQL (MySQL) and then opt for creating failover replicas.
• Make sure to choose Cloud SQL (MySQL) and confirm that the option for enabling binary logging is checked.
• Choose Cloud Spanner and configure your instance with 2 nodes.
• .

Answer explanation

To recover a specific point in time, you can specify a binary log position in a binary log file.

As a Fitness app company, you have just deployed a new update to your app and have discovered a bug in the release. What steps should you take to revert to the previous version of the app immediately?

• To revert an application, go to the App Engine page in the GCP Console and choose the specific application, then click on the Revert option.
• Execute the command "gcloud app restore".
• Direct all the traffic to the previous version by accessing the App Engine Versions page in the GCP Console.
• Create a distinct application for the original version and proceed to the App Engine settings where you can distribute traffic between applications, ensuring that the original version handles all requests.
• .

Answer explanation

A. Avoid using gcloud app restore as it is deprecated and was previously used for backups. B. This feature is not available. C. That is accurate. D. Redeployment is not required.

In a Fashion e-commerce company, which option should you choose if you have a single binary application that needs to be deployed on Google Cloud and you want it to automatically scale based on the CPU usage of the underlying infrastructure while adhering to the policy of using virtual machines directly rather than a 3rd party service or higher level abstraction?

• To automatically adjust the number of instances in a managed instance group based on the time of day, you can create an instance template and use it in the group.
• Set up a cluster on Google Kubernetes Engine and apply horizontal pod autoscaling to adjust the application's scale.
• Firstly, generate an instance template. Then, apply the template in a managed instance group that has autoscaling set up.
• Employ a series of external utilities for creating automation that enables scaling of the application up or down. This is based on Stackdriver CPU usage monitoring.
• .

Answer explanation

A. Direct usage of VMs is not involved. B. Meets all the necessary conditions. C. CPU usage scalability and time-based scalability are not specified. D. The usage of Google Cloud will lose its purpose if all the necessary steps are performed manually by Third Party Tools.

What is the most secure and time-limited method to share a highly sensitive .csv file containing personal information with an external company that does not have a user-based access privilege in an online therapy platform?

• Configure the object to be publicly accessible and implement object lifecycle policies to delete it automatically after a duration of four hours.
• Generate a URL with a signature that will expire in four hours and distribute it to the organization.
• To allow external company access, make a new Cloud Storage bucket, move the object to it, and delete the bucket after four hours.
• To provide the company with the object's URL, set up the storage bucket as a static website. Remember to remove the object from the storage bucket after a duration of four hours.
• .

Answer explanation

The most secure and simplest method to be used in this case is the signed URL.

How can an e-commerce company migrate to Compute Engine as its primary infrastructure on Google Cloud while ensuring that some VMs are accessible through the public internet and others are only accessible through the internal network?

• To configure a secure network, establish a VPC and allocate subnets for DMZ and LAN. After that, define firewall regulations that permit appropriate communication between the DMZ and LAN subnets. Additionally, create a firewall rule that enables public egress traffic for the DMZ.
• To configure a secure network environment in Google Cloud, you need to establish two Virtual Private Clouds (VPCs) - one for the DMZ and another for the LAN, each containing a subnet. Additionally, you must define firewall rules that permit relevant traffic between the DMZ and the LAN subnets, along with a separate firewall rule that allows public egress traffic for the DMZ.
• To configure the network of a project, you can create a VPC that contains two subnets, one for DMZ and one for LAN. After that, set up firewall regulations that permit traffic between the DMZ and LAN subnets and enable public traffic to enter the DMZ.
• To implement a secure network architecture in Google Cloud, it is recommended to create two separate VPCs - one for DMZ and another for LAN, each with their respective subnets. Additionally, appropriate firewall rules must be configured to enable communication between the two subnets, and to allow public ingress traffic for the DMZ.
• .

Answer explanation

Since we are concerned with incoming traffic, which is ingress traffic, we can choose either option A or option C. However, a single VPC is sufficient, which means that option A is the correct choice. This information can be found on the Google Cloud VPC documentation page.

As a healthcare technology company employee, what is the quickest way to deploy a new Jenkins server for a project as requested by your manager?

• Utilize the command line interface to generate a fresh Compute Engine instance and proceed to install Jenkins.
• On Compute Engine, generate a Kubernetes cluster and initiate a deployment utilizing the Docker image of Jenkins.
• The Jenkins solution can be launched by utilizing GCP Marketplace.
• Deploy the Java WAR of Jenkins to App Engine Standard after downloading it.
• .

Answer explanation

Best practice suggests that using the One Click solution available in the GCP marketplace is recommended.

How can we quickly disable logs emitted by a development GKE container using the minimum number of steps to reduce costs incurred last month, as complained by the CFO of our home security system provider company?

• Disable the log source for GKE Cluster Operations resource by visiting the Logs ingestion window in Stackdriver Logging.
• To resolve the issue, first, navigate to the GKE dashboard, and remove any current clusters. Then, create a fresh cluster. Finally, make sure to disable the legacy Stackdriver Monitoring option.
• Disable the log source for the GKE container resource by accessing the Logs ingestion window in Stackdriver Logging.
• 1. Access the GKE dashboard and remove any current clusters. 2. Create a fresh cluster. 3. Disable the legacy Stackdriver Logging feature.
• .

Answer explanation

Since GKE produced an excessive amount of logs, it is recommended to deactivate its log source.

What is the best configuration for a Cybersecurity software provider company that has two separate workloads, Production and Test, which must be deployed on Compute Engine, with Test VMs on a different subnetwork than the Production VMs, but all VMs must be able to send traffic to each other through internal IP addresses without additional routes being created, using one VPC and 2 subnetworks?

• Set up two personalized VPCs, each consisting of only one subnet. Ensure that both subnets are located in the same region and have the same CIDR range.
• Two VPCs should be created, each having only one subnet. These subnets should be made in different regions and have distinct CIDR ranges.
• To set up a custom VPC, make two subnets, each with a distinct CIDR range and in a separate region.
• To set up a custom VPC, generate two subnets within the same region and with identical CIDR range.
• .

Answer explanation

Subnet primary and secondary ranges must not overlap with any assigned range, any primary or secondary range of other subnets in the same network, or any IPv4 range of subnets in peered networks.