Ceification Exam Guide Sections

1 Setting up a cloud solution environment

2 Planning and configuring a cloud solution

3 Deploying and implementing a cloud solution

4 Ensuring successful operation of a cloud solution

5 Configuring access and security

Section 1:
Setting up a cloud solution environment
1. Diagnostic Question 01
1

Stella is a new member of a team in your

A. Assign Stella a roles/compute.viewer role.
company who has been put in charge of
monitoring VM instances in the organization. B. Assign Stella compute.instances.get permissions
Stella will need the required permissions to on all of the projects she needs to monitor.
perform this role. C. Add Stella to a Google Group in your
organization. Bind that group to
roles/compute.viewer.
How should you grant her those permissions? D. Assign the “viewer” policy to Stella.
1. Diagnostic Question 02
1

How are resource hierarchies A. Organization, Project, Resource, Folder.

organized in Google Cloud? B. Organization, Folder, Project, Resource.
C. Project, Organization, Folder, Resource.
D. Resource, Folder, Organization, Project.
1. Diagnostic Question 03
1

What Google Cloud project A. The Project ID.

attributes can be changed? B. The Project Name.
C. The Project Number.
D. The Project Category.
1. Diagnostic Question 04
1

Jane will manage objects in Cloud

A. Assign Jane the roles/storage.objectCreator on every project.
Storage for the Cymbal Superstore. She
needs to have access to the proper B. Assign Jane the roles/viewer on each project and
permissions for every project across the the roles/storage.objectCreator for each bucket.
organization. C. Assign Jane the roles/editor at the organizational level.
D. Add Jane to a group that has the roles/storage.objectAdmin
role assigned at the organizational level.
What should you do?
1. Diagnostic Question 05
1

You need to add new groups of

A. Grant the most restrictive basic role to most services,
employees in Cymbal Superstore’s
grant predefined or custom roles as necessary.
production environment. You need to
consider Google’s recommendation of B. Grant predefined and custom roles that provide
using necessary permissions and grant basic roles only where
least privilege. needed.
C. Grant the least restrictive basic roles to most services and
grant predefined and custom roles only when necessary.
What should you do?
D. Grant custom roles to individual users and implement basic
roles at the resource level.
1.1 Diagnostic Question 06

The Operations Department at Cymbal Superstore wants to provide

compute.images.list
managers access to information about VM usage without allowing t
compute.images.get
compute.images.create
compute.images.setIAM
computer.images.update

Which two permissions will they receive?

1.1 Setting up cloud projects and accounts

Courses Skill Badges Documentation

M2 Getting Starting with Google Cloud

Google Cloud Google Cloud

M4 Cloud IAM

=
M1 Cloud IAM
1. Diagnostic Question 07
2

How are billing accounts applied to A. Set up Cloud Billing to pay for usage costs in
projects in Google Cloud? (Pick Google Cloud projects and Google Workspace
two.) accounts.
B. A project and its resources can be tied to more
than one billing account.
C. A billing account can be linked to one or more projects.
D. A project and its resources can only be tied to
one billing account.
E. If your project only uses free resources you don’t
need a link to an active billing account.
1. Diagnostic Question 08
2

Fiona is the billing administrator for the

A. Change the budget alert default threshold rules
project associated with Cymbal
to include Jeffrey as a recipient.
Superstore’s eCommerce application.
Jeffrey, the marketing department lead, B. Use Cloud Monitoring notification channels to
wants to receive emails related to send Jeffrey an email alert.
budget alerts. Jeffrey should have C. Add Jeffrey and Fiona to the budget scope
access to no additional billing custom email delivery dialog.
information. D. Send alerts to a Pub/Sub topic that Jeffrey
is subscribed to.
What should you do?
1.2 Managing billing configuration

Courses Documentation

M2 Getting Starting with Google Cloud

M6 Resource Management M3 Resource Management

=
1. Diagnostic Question 09
3

Pick two choices that provide a A. Google Cloud Console

command line interface to Google B. Cloud Shell
Cloud. C. Cloud Console Mobile App
D. Cloud SDK
1. Diagnostic Question 10
3

You want to use the Cloud Shell to

A. gcloud
copy files to your Cloud Storage
bucket. B. gsutil
C. bq

Which Cloud SDK command should you D. Cloud Storage Browser

use?
1.3 Installing and configuring the command line interface

Courses Skill Badges Documentation

M2 Getting Starting with Google Cloud

Google Cloud Google Cloud

M1 Getting Started with Google Cloud

=
M1 Introduction to Google Cloud
2. Diagnostic Question 01
1

The projected amount of cloud A. Use the pricing calculator to estimate

storage required for Cymbal the costs for 10 TB of regional
Superstore to enable users to post standard
pictures for project reviews is 10 TB of storage, 30 TB of regional Coldline
immediate access storage in the US storage, and egress charges for reads
and 30 TB of storage for historical from storage.
posts in a bucket located near Cymbal B. Use the pricing calculator to estimate the price for 10 TB of
Superstore’s headquarters. The regional standard storage, 30 TB of regional Nearline storage, and
contents of this bucket will need to be ingress charges for posts to the bucket.
accessed once every 30 days. You
C. Use the pricing calculator to estimate the price for 10 TB of
want to estimate the cost of these
multi-region standard storage, 30 TB for regional Coldline storage,
storage resources to ensure this is
and ingress charges for posts to the bucket.
economically feasible.
D. Use the pricing calculator to estimate the price for 10 TB of
multi-region standard storage, 30 TB for regional Nearline,
What should you do?
and egress charges for reads from the bucket.
2.1 Planning and estimating using the Pricing Calculator

Courses Documentation

M3 Virtual Machines M3 Vi ual Machines

M6 Resource Management

M3 Resource Management
=
2. Diagnostic Question 02
2

Cymbal Superstore decides to migrate A. Implement an application using containers on Cloud Run.
their supply chain application to B. Implement an application using code on App Engine.
Google Cloud. You need to configure
specific operating system C. Implement an application using containers on
dependencies. Google Kubernetes Engine.
D. Implement an application using virtual machines on
Compute Engine.
What should you do?
2.2 Diagnostic Question 03

Cymbal Superstore decides to pilot a cloud application for

SSH
their
into
point
a Compute
of sale system
Engine in
VMtheir
andflagship
executestore.
your code.
You want to focus on code an
Package your code to a container image and post it to Cloud Run.
Implement a deployment manifest and run kubectl apply on it in Google Kuber
Code your solution in Cloud Functions.

How do you proceed?

2. Diagnostic Question 04
2

An application running on a A. Create Compute Engine Virtual Machines

highly-customized version of Ubuntu and migrate the app to that infrastructure.
needs to be migrated to Google B. Deploy the existing application to App Engine.
Cloud. You need to do this in the least
C. Deploy your application in a container image to Cloud Run.
amount of time with minimal code
changes. D. Implement a Kubernetes cluster and create
pods to enable your app.
How should you proceed?
2.2 Diagnostic Question 05

You want to deploy a microservices application. You need

Cloud
full control
Run of how you manage containers, reliability, and autoscaling, but do
App Engine
Google Kubernetes Engine
Compute Engine

Which compute option should you use?

2.2 Planning and configuring compute resources

Courses Skill Badges

M3 Virtual Machines in the Cloud M2 Introduction to Containers and Kubernetes Google Cloud

M5 Containers in the Cloud

M6 Applications in the Cloud

M3 Virtual Machines M3 Virtual Machines Documentation

=
2.3 Diagnostic Question 06

Cymbal Superstore needs to analyze whether they met quarterly

BigQuery
sales projections. Analysts assigned to run this query are familiar with
Cloud SQL
Cloud Spanner
Cloud Firestore

What data solution should they implement?

2.3 Diagnostic Question 07

Cymbal Superstore’s supply chain application frequently analyzes

Multi-regional
large amounts of data to inform business processes and operational d
Regional
Nearline
Coldline

What storage class would make sense for this use case?
2. Diagnostic Question 08
3

Cymbal Superstore has a need to populate A. BigQuery

visual dashboards with historical time-based B. Cloud Storage
data. This is an analytical use-case.
C. Cloud Firestore
D. Cloud SQL
Which two storage solutions could they use?
E. Cloud Bigtable
2.3 Planning and configuring data storage options

Courses Skill Badges Documentation

M4 Storage in the Cloud

Google Cloud

M5 Storage and Database Services

=
M2 Storage and Database Services
2. Diagnostic Question 09
4

Cymbal Superstore is piloting an A. Implement a premium tier pass-through

update to its ecommerce app for the external https load balancer connected
flagship store in Minneapolis, to the web tier as the frontend and a
Minnesota. The app is implemented regional internal load balancer between the web tier and backend.
as a three-tier web service with B. Implement a proxied external TCP/UDP network load balancer
traffic originating from the local area connected to the web tier as the frontend and a premium network
and resources dedicated for it in tier ssl load balancer between the web tier and the backend.
us-central1. You need to configure
C. Configure a standard tier proxied external https load balancer
a secure, low-cost network
connected to the web tier as a frontend and a regional internal
load-balancing architecture for it.
load balancer between the web tier and the backend.
D. Configure a proxied SSL load balancer connected to the web tier
How do you proceed? as the frontend and a standard tier internal TCP/UDP load
balancer between the web tier and the backend.
2. Diagnostic Question 10
4

What Google Cloud load balancing A. Global http(s)

option runs at Layer 7 of the TCP stack? B. Global SSL Proxy
C. Global TCP Proxy
D. Regional Network
2.4 Planning and configuring network resources

Courses Documentation

M3 Virtual Machines in the Cloud

M2 Virtual Networks M2 Virtual Network

M9 Load Balancing and Autoscaling
M2 Load Balancing and Autoscaling

=
3. Diagnostic Question 01
1

Cymbal Superstore’s sales department

A. Find a MySQL machine image in Cloud Marketplace
has a medium-sized MySQL database.
and configure it to meet your needs.
This database includes user-defined
functions and is used internally by the B. Implement a database instance using Cloud SQL, back
marketing department at Cymbal up your local data, and restore it to the new instance.
Superstore HQ. The sales department C. Configure a Compute Engine VM with an N2 machine
asks you to migrate the database to type, install MySQL, and restore your data to the new
Google Cloud in the most timely and instance.
economical way. D. Use gcloud to implement a Compute Engine instance
with an E2-standard-8 machine type, install, and
What should you do? configure MySQL.
3. Diagnostic Question 02
1

The backend of Cymbal Superstore’s

A. Create a new instance template. Click Update VMs. Set
e-commerce system consists of
the update type to Opportunistic. Click Start.
managed instance groups. You need to
update the operating system of the B. Create a new instance template, then click Update VMs.
instances in an automated way using Set the update type to PROACTIVE. Click Start.
minimal resources. C. Create a new instance template. Click Update VMs. Set
max surge to 5. Click Start.
D. Abandon each of the instances in the managed instance
group. Delete the instance template, replace it with a
What should you do?
new one, and recreate the instances in the managed
group.
3.1 Deploying and implementing Compute Engine resource

Courses Documentation

M3 Virtual Machines in the Cloud

M3 Virtual Machines M3 Virtual Machines

M9 Load Balancing and Autoscaling
M10 Infrastructure Automation M2 Load Balancing and Autoscaling
M3 Infrastructure Automation
=
3.2 Diagnostic Question 03

The development team for the supply chain project is ready

Implement
to start building
an autopilot
their cluster
new cloud
in us-central1-a
app using a small
with aKubernetes
default pool
cluster
and an
forUb
th
Implement a private standard zonal cluster in us-central1-a with a default poo
Implement a private standard regional cluster in
us-central1 with a default pool and container-optimized image type.
Implement an autopilot cluster in us-central1 with an Ubuntu image type.

How would you implement this?

3.2 Deploying and Implementing
Google Kubernetes Engine resources

Courses Skill Badges Documentation

M5 Containers in the Cloud

Google Cloud

M2 Introduction to Containers and Kubernetes

M3 Kubernetes Architecture
3.3 Diagnostic Question 04

You need to quickly deploy a containerized web applicationApp

on Engine
GoogleFlexible
Cloud. You know the services you want to be exposed. You do n
App Engine Standard
Cloud Run
Cloud Functions

What technology meets these needs?

3.3 Diagnostic Question 05

You need to analyze and act on files being added to a Cloud

--trigger-event
Storage bucket.
google.storage.object.finalize
Your programming team is proficient in Python. The analy
--trigger-event google.storage.object.create
--trigger-event google.storage.object.change
--trigger-event google.storage.object.add

How should you configure the

--trigger-event parameter using gcloud?
3.3 Deploying and implementing Cloud Run and Cloud Fun

Courses Documentation

M6 Applications in the Cloud

M7 Developing, Deploying, and Monitoring in the Cloud
3. Diagnostic Question 06
4

You require a Cloud Storage bucket

A. Run a gcloud mb command specifying the name of the
serving users in New York City. There is a
bucket and accepting defaults for the other mb
need for geo-redundancy. You do not plan
settings.
on using ACLs.
B. Run a gsutil mb command specifying a multi-
regional location and an option to turn ACL
evaluation off.
What CLI command do you use? C. Run a gsutil mb command specifying a dual-
region bucket and an option to turn ACL
evaluation off.
D. Run a gsutil mb command specifying a dual-region
bucket and accepting defaults for the other mb
settings.
3.4 Diagnostic Question 07

Cymbal Superstore asks you to implement Cloud SQL as a database

--availability-type
backend to their supply chain application. You want to configure au
--replica-type
--secondary-zone
--master-instance-name

Which gcloud command line argument is required to configure the stated failover capability as you create the required instances?
3. Diagnostic Question 08
4

Cymbal Superstore’s marketing

A. Implement a bq load command in a command line
department needs to load some slowly
script and schedule it with cron.
changing data into BigQuery. The data
arrives hourly in a Cloud Storage B. Read the data from your bucket by using the
bucket. You want to minimize cost and BigQuery streaming API in a program.
implement this in the fewest steps. C. Create a Cloud Function to push data to BigQuery
through a Dataflow pipeline.
What should you do? D. Use the BigQuery data transfer service to schedule
a transfer between your bucket and BigQuery.
3.4 Deploying and implementing data solutions

Courses Skill Badges Documentation

M4 Storage in the Cloud

M8 Big Data and Machine Learning in the Cloud Google Cloud

M5 Storage and Database Services

Google Cloud

=
M2 Storage and Database Services
3. Diagnostic Question 09
5

Which Virtual Private Cloud (VPC)

A. Default Project network
network type allows you to fully control
IP ranges and the definition of regional B. Auto mode network
subnets? C. Custom mode network
D. An auto mode network converted to a custom network
3.5 Deploying and implementing networking resources

Courses Skill Badges Documentation

M2 Virtual Networks
Google Cloud

=
M2 Virtual Networks
3. Diagnostic Question 10
5

What action does the terraform

A. Downloads the latest version of the terraform provider.
apply command perform?
B. Verifies syntax of terraform config file.
C. Shows a preview of resources that will be created.
D. Sets up resources requested in the terraform config file.
3.7 Implementing resources via infrastructure as code

Courses Documentation

M10 Infrastructure Automation M3 Infrastructure Automation

=
4. Diagnostic Question 01
1

A. gcloud compute snapshots list

You want to view a description of your
available snapshots using the B. gcloud snapshots list
command line interface (CLI). What C. gcloud compute snapshots get
gcloud command should you use?
D. gcloud compute list snapshots
4. Diagnostic Question 02
1

You have a scheduled snapshot you

A. Delete the downstream incremental snapshots
are trying to delete, but the
before deleting the main reference.
operation returns an error.
B. Delete the object the snapshot was created from.
What should you do to C. Detach the snapshot schedule before deleting it.
resolve this problem? D. Restore the snapshot to a persistent disk before deleting it.
4. Diagnostic Question 03
1

A. Defining Health checks.

Which of the following tasks are part
of the process when configuring a B. Providing Number of instances.
managed instance group? (Pick two.) C. Specifying Persistent disks.
D. Choosing instance Machine type.
E. Configuring the operating system.
4.1 Managing Compute
Engine resources Documentation

Courses

M3 Virtual Machines in the Cloud

M3 Virtual Machines M3 Virtual Machines

M9 Load Balancing and Autoscaling
M2 Load Balancing and Autoscaling

=
4.2 Diagnostic Question 04

Cymbal Superstore’s GKE cluster requires an internal http(s)

Annotate
load your
balancer.
ingress
Youobject
are creating
with an the
ingress.class
configuration
of “gce.”
files required
for this resource. Configure your service object with a type: LoadBalancer.
Annotate your service object with a neg reference.
Implement custom static routes in your VPC.

What is the proper setting for this scenario?

4. Diagnostic Question 05
2

A. Pod templates
What Kubernetes object provides
access to logic running in your B. Pods
cluster via endpoints that you C. Services
define?
D. Deployments
4. Diagnostic Question 06
2

A. kubectl apply
What is the declarative way to B. kubectl create
initialize and update Kubernetes
C. kubectl replace
objects?
D. kubectl run
4. Managing Google Documentation

2 Kubernetes Engine resources Ingress for Internal HTTP(S) Load

Balancing
Ingress for External HTTP(S) Load
Balancing
Configuring Ingress for external

Courses Skill Badges

load balancing
Configuring Ingress for Internal
HTTP(S) Load Balancing
Google Cloud Fundamentals: Core
Infrastructure GKE overview | Kubernetes Engine
Google Cloud Documentation
● M5 Containers in the Cloud
Set Up and Configure Pod | Kubernetes Engine
Getting Started with a Cloud Environment in Documentation
Google Kubernetes Engine Google Cloud Quest Deployment | Kubernetes Engine
Documentation
● M3 Kubernetes Architecture
● M4 Introduction to Services | Kubernetes Engine
Kubernetes Workloads Documentation
Overview of deploying workloads |
Kubernetes Engine Documentation
Kubernetes Object Management
4.3 Diagnostic Question 07

You have a Cloud Run service with a database backend. You want
Set Min
to instances.
limit the number of connections to
your database. Set Max instances.
Set CPU Utilization.
Set Concurrency settings.

What should you do?

4.3 Managing Cloud Run resources

Courses Documentation

M6 Applications in the Cloud

4. Diagnostic Question 08
4

You want to implement a lifecycle rule

A. Age
that changes your storage type from
standard to nearline after a specific B. CreatedBefore
date. C. MatchesStorageClass
D. IsLive
What conditions should you E. NumberofNewerVersions
use? (Pick two.)
4.4 Managing storage and database solutions

Courses Documentation

M5 Storage and Database Services M2 Storage and Database Services

=
4. Diagnostic Question 09
5

Cymbal Superstore has a subnetwork

A. gcloud compute networks subnets expand-ip-
called mysubnet with an IP range of
range mysubnet --region us-central1 --prefix-
10.1.2.0/24. You need to expand this
length 20
subnet to include enough IP
addresses for at most 2000 new users B. gcloud networks subnets expand-ip-range mysubnet
or devices. --region us-central1 --prefix-length 21
C. gcloud compute networks subnets expand-ip-
range mysubnet --region us-central1 --prefix-
length 21
What should you do?
D. gcloud compute networks subnets expand-ip-
range mysubnet --region us-cetnral1 --prefix-
length 22
4.5 Managing networking resources

Courses Documentation

M2 Virtual Networks M2 Virtual Networks

=
4. Diagnostic Question 10
6

Cymbal Superstore’s supply chain A. Choose resource type of VM

management system has been instance and metric of CPU load,
deployed and is working well. You are condition trigger if any time series
tasked with monitoring the system’s violates,
resources so you can react quickly to condition is below, threshold is .60, for 5 minutes.
any problems. You want to ensure the B. Choose resource type of VM instance and metric of CPU
CPU usage of each of your Compute utilization, condition trigger all time series violates, condition is
Engine instances in us-central1 remains above, threshold is .60 for 5 minutes.
below 60%. You want an incident
C. Choose resource type of VM instance, and metric of CPU
created if it exceeds this value for 5
utilization, condition trigger if any time series violates, condition is
minutes. You need to configure the
below, threshold is .60 for 5 minutes.
proper alerting policy for this
scenario. D. Choose resource type of VM instance and metric of CPU
utilization, condition trigger if any time series violates, condition is
above, threshold is .60 for 5 minutes.
What should you do?
4.6 Monitoring and logging

Courses Skill Badges Documentation

M7 Resource Monitoring
Google Cloud

=
M4 Resource Monitoring

Google Cloud
5. Diagnostic Question 01
1

You need to configure access to

A. Assign permissions to a Google account
Cloud Spanner from the GKE cluster
referenced by the application.
that is supporting Cymbal
Superstore’s ecommerce B. Assign permissions through a Google
microservices application. You want Workspace account referenced by the
to specify an account type to set the application.
proper permissions. C. Assign permissions through service
account referenced by the application.

What should you do? D. Assign permissions through a Cloud Identity

account referenced by the application.
5. Diagnostic Question 02
1

You are trying to assign roles to the dev A. Ask your administrator for
and prod projects of Cymbal Superstore’s resourcemanager.projects.setIamPolicy roles for
e-commerce app but are receiving an error each project.
when you try to run set-iam policy. The B. Ask your administrator for the
projects are organized into an ecommerce roles/resourcemanager.folderIamAdmin for the
folder in the Cymbal Superstore organizational ecommerce folder.
hierarchy. You want to follow best practices
C. Ask your administrator for the
for the permissions you need while respecting
roles/resourcemanager.organizationAdmin for
the practice of least privilege.
Cymbal Superstore.

What should you do? D. Ask your administrator for the

roles/iam.securityAdmin role in IAM.
5. Diagnostic Question 03
1

You have a custom role implemented for

A. Make the change to the custom role
administration of the dev/test environment for
locally and run an update on the custom
Cymbal Superstore’s transportation
role.
management application. You are developing a
pilot to use Cloud Run instead of Cloud B. Delete the custom role and recreate a
Functions. You want to ensure your new custom role with required
administrators have the correct access to the permissions.
new resources. C. Copy the existing role, add the new
permissions to the copy, and delete the
What should you do? old role.
D. Create a new role with needed
permissions and migrate users to it.
5.1 Managing Identity and Access Management (IAM)

Courses Skill Badges Documentation

M2 Getting Starting with Google Cloud

Google Cloud

M4 Identity and Access Management (IAM)

=
M1 Identity and Access Management (IAM)
5. Diagnostic Question 04
2

A. To directly access user data

Which of the scenarios below is
an example of a situation where B. For development environments
you should use a service account? C. For interactive analysis
D. For individual GKE pods
5.2 Diagnostic Question 05

Cymbal Superstore is implementing a mobile app for end users

APIto track deliveries that are en route to them. The app needs to access d
key
OAuth 2.0 client
Environment provided service account
Service account key

What kind of credentials should you use?

5.2 Managing service accounts

Courses Documentation

M2 Getting Starting with Google Cloud

M4 Identity and Access M1 Identity and Access Management (IAM)

Management (IAM)
=
5. Diagnostic Question 06
3

A. Admin Activity audit logs

Which Cloud Audit log is disabled
by default with a few exceptions? B. Data Access audit logs
C. System Event audit logs
D. Policy Denied audit logs
5. Diagnostic Question 07
3

You are configuring audit logging for A. Admin Activity log entries
Cloud Storage. You want to know when
objects are added to a bucket. B. ADMIN_READ log entries
C. DATA_READ log entries

Which type of audit log D. DATA_WRITE log entries

entry should you monitor?
5.3 Viewing audit logs

Courses Documentation

M7 Deployment and Monitoring

M7 Resource Monitoring M4 Resource Monitoring

=
Plan time to prepare
When will you take the exam?

How many weeks do you have

to prepare?

How many hours will you spend

preparing for the exam each
week?
How many total hours will you
prepare?
Example 6-week plan

Week 1 Week 2 Week 3 Week 4 Week 5 Week 6

Google Cloud Fundamentals:

CreateCore
andInfrastructure
Manage Cloud Architecting
Resourceswith
SkillCompute
BadgeSetEngine
up and configure a cloud
Getting
environment
started with GKESample questions
Skill Badge
Foundational Infrastructure Skill Badge
Review
Automating Infrastructure documentation
on Google Cloud with Terraform
Skill Badge
Weekly study plan
Now, consider what you’ve learned about your knowledge and skills through the diagnostic questions in this course. You should have a better u

Use the template that follows to plan your study goals for each week. Consider:
What exam guide section(s) or topic area(s) will you focus on?
What courses (or specific modules) will help you learn more?
What Skill Badges or labs will you work on for hands-on practice?
What documentation links will you review?
What additional resources will you use - such as sample questions?
You may do some or all of these study activities each week.

Duplicate the weekly template for the number of weeks in your individual preparation journey.
Weekly study template (example)

Area(s) of focus: Configuring access using IAM

Courses/modules to complete:
Google Cloud Fundamentals: Core Infrastructure, Module 2 Getting Started with Google Cloud
Skill Badges/labs to complete:
Architecting with Google Compute Engine, Module 4 Cloud IAM
Documentation to review:
Set Up and Configure a Cloud Environment in Google Cloud Quest

https://cloud.google.com/iam/docs/overview
https://cloud.google.com/architecture/prep-kubernetes-engine-for-prod managing_identity_and_access
https://cloud.google.com/iam/docs/creating-custom-roles
https://cloud.google.com/docs/authentication/production automatically
https://cloud.google.com/docs/authentication/

Sample questions 1-5

Additional study:
Weekly study template

Area(s) of focus:

Courses/modules to complete:
Skill Badges/labs to complete:
Documentation to review:

Additional study: