0% found this document useful (0 votes)
146 views32 pages

ACE Sim 03 PDF

Uploaded by

Avi Sutanto
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
146 views32 pages

ACE Sim 03 PDF

Uploaded by

Avi Sutanto
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 32

Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

EXTENDED OFFER | Flat 15% OFF SITEWIDE | Use Coupon - WHIZOFFER15

Ask Hi,
Search Courses Db Expert CARLOS

My All
Dashboard Inbox
Courses Courses

 j My Courses j Google Cloud Certi�ed Associate Cloud Engineer j Practice Test 3 j

Report

Practice Test 3

Completed on Monday , 07 October


Attempt 1
2019 , 04:38 PM

Marks Obtained 0 / 30 Time Taken N/A

Your score is 0.0%


Result Fail

Mode Practice

Domains wise Quiz Performance Report

No Domain Total Correct Incorrect Unattempted Marked


Question as
Review

1 Other 9 0 0 9 0

2 Planning and 8 0 0 8 0
con�guring a
cloud solution

3 Setting up a 4 0 0 4 0
cloud solution
environment

Total All Domain 30 0 0 30 0

1 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

No Domain Total Correct Incorrect Unattempted Marked


Question as
Review

4 Deploying and 4 0 0 4 0
implementing a
cloud solution

5 Ensuring 3 0 0 3 0
successful
operation of a
cloud solution

6 Con�gure 2 0 0 2 0
access and
security

Total All Domain 30 0 0 30 0

Review the Answers Sorting by All

Question 1 Unattempted

Domain : Other

You have a system generated log files required to be later uploaded to Google Storage in
the data lake. Since the data is only accessed occasionally a few times a year by the
development team for debugging and log analysis. You are looking for a cheaper storage
option for log files than the standard class. Which of the following is suitable?

] A. Cloud Storage Nearline

] B. Cloud Storage Coldline

] C. BigQuery

] D. Filestore

Explanation:

2 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Correct Answer: A                                                  

Google Cloud Storage Nearline is a low-cost, highly durable storage service for storing
infrequently accessed data. Nearline Storage is ideal for data you plan to read or modify
on average once a month or less.

Google Cloud Storage Coldline is a very-low-cost, highly durable storage service for data
archiving, online backup, and disaster recovery. Coldline Storage is the best choice for
data that you plan to access at most once a year, due to its slightly lower availability, 90-
day minimum storage duration, costs for data access, and higher per-operation costs.

Option B is incorrect: Scenario mentions the need to access the data several times a
year. Hence, Coldline is not a suitable option because Coldline is used to plan archive
data accessed at most once a year.

Options C and D are incorrect: Both BigQuery and Filestore’s storage rate is two times
higher than Cloud Storage Nearline.

Source(s):

Google Storage Classes:

https://cloud.google.com/storage/docs/storage-classes

Ask our Experts Rate this Question? v u

Question 2 Unattempted

Domain : Other

A system is expected to receive over 15,000 content delivery logs every minute from
different web & mobile apps. Logs are received in JSON format. Due to logs being
generated by different apps, each developed by a different team, logs do not have a
fixed structure and may hold different attributes. Which of the following is a
recommended storage option?

] A. Cloud SQL

] B. Cloud Spanner

3 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

] C. BigTable

] D. Datastore

Explanation:

Correct Answer: C

Cloud BigTable is a petabyte-scale, fully managed NoSQL database service for large
analytical and operational workloads. It provides flexible schema options.

Options A and B are incorrect: Cloud SQL & Spanner are relational database services.
They are not recommended for JSON-format log data with a flexible schema.

Option D is incorrect: Datastore can be a potential choice since it’s a NoSQL database.
However, Datastore is not built for storing huge data volumes as required in this scenario.
Datastore is designed for web applications of small scale.

Source(s):

BigTable vs Datastore:

https://stackoverflow.com/questions/30085326/google-cloud-bigtable-vs- google-
cloud-datastore

Ask our Experts Rate this Question? v u

Question 3 Unattempted

Domain : Other

A stock market company receives real-time updates from different stock prices in the
USA. The company seeks a solution that can use stock price data for real-time analysis.
The solution should allow high throughput to allow queries to run and return the required
results with minimum latency. The solution should also be scaled out for more
performance. Which of the following products is the best solution in this scenario?

] A. BigTable

4 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

] B. BigQuery

] C. Datastore

] D. Cloud Spanner

Explanation:

Correct Answer: A

Cloud BigTable is a petabyte-scale, fully managed NoSQL database service for large
analytical and operational workloads. Under a typical workload, Cloud BigTable delivers
highly predictable performance. When everything is running smoothly, a typical workload
can achieve the following performance for each node in the Cloud Bigtable cluster,
depending on which type of storage the cluster uses:

                                                 

In general, a cluster's performance increases linearly as you add nodes to the cluster. For
example, if you create an SSD cluster with 10 nodes, the cluster can support up to
100,000 rows per second for a typical read-only or write-only workload, with 6 ms
latency for each read or write operation.

Option B is incorrect: BigQuery doesn’t provide the high throughput and low latency
competent to Bigtable. Moreover, you are unable to increase BigQuery’s performance,
opposed to Bigtable which you can add more nodes for linear performance return.

Option C is incorrect: Datastore is not built for storing and reading huge data volumes as
required in this scenario. Datastore is designed for web applications of small scale.

Option D is incorrect: Cloud Spanner does not guarantee the same performance and low
latency as BigTable.

Source(s):

Understanding BigTable Performance:

5 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

https://cloud.google.com/bigtable/docs/performance

Ask our Experts Rate this Question? v u

Question 4 Unattempted

Domain : Other

You have an on-premise MySQL database that you have been asked to move to Google
Cloud. Users should run SQL queries to fetch data from the database. Your solution
should be cost-effective and allow increasing read capacities in the future. Which of the
following Google Cloud product is the best for this scenario?

] A. Cloud Storage

] B. Cloud Spanner

] C. Cloud SQL

] D. Cloud Datastore

Explanation:

Correct Answer: C

Cloud SQL is a fully managed database service that makes it easy to set up, maintain,
manage, and administer your relational PostgreSQL, MySQL, and SQL Server databases
in the cloud.

Option A is incorrect: Google Storage is blob storage. It does not work as an RDMS.

Option B is incorrect: Cloud Spanner is a very sophisticated and expensive approach for
this scenario. Cloud SQL is enough to cover the requirements.

Option D is incorrect: Datastore is a schemaless NoSQL database. Migration is from a


structured SQL database so Datastore is not a viable choice.

Source(s):

6 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Cloud SQL:

https://cloud.google.com/sql/

Ask our Experts Rate this Question? v u

Question 5 Unattempted

Domain : Other

You need to allow traffic from specific virtual machines in 'subnet-a' network access to
machines in 'subnet-b' without giving the entirety of subnet-a access. How can you
accomplish this?

Create a firewall rule to allow traffic from resources with specific


] A.
network tags, then assign the machines in subnet-a the same tags.

Relocate the subnet-a machines to a different subnet and give the new
] B.
subnet the needed access.

Create a rule to deny all traffic to the entire subnet, then create a second
] C.
rule with higher priority giving access to tagged VM's in subnet-a.

You can only grant firewall access to an entire subnet and not individual
] D.
VM's inside.

Explanation:

Correct Answer A

A (Correct answer) - Create a firewall rule to allow traffic from resources with specific
network tags, then assign the machines in subnet-a the same tags.

Network tags allow more granular access based on individually tagged instances -
Instances by target tags: The firewall rule is applicable only to VMs if they have a
matching network tag.

B - Relocate the subnet-a machines to a different subnet and give the new subnet the
needed access.

This would give the entire subnet access which is against the requirements: allow traffic

7 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

from specific virtual machines in 'subnet-a' network access to machines in 'subnet-b'


without giving the entirety of subnet-a access.

C - Create a rule to deny all traffic to the entire subnet, then create a second rule with
higher priority giving access to tagged VM's in subnet-a.

Creating overlapping rules with higher priority might technically work, but since traffic
defaults to denied if no rule is in place, this is unnecessary. Assigning rules and instances
by tags is the best answer.

D - You can only grant firewall access to an entire subnet and not individual VM's inside.

This is not true per answer A

Ask our Experts Rate this Question? v u

Question 6 Unattempted

Domain : Other

You are managing the GCP Account of a client, the client raises a request to attach 9
local SSDs and launch a VM instance in us-east1 Region, as a Cloud Architect what would
be your response to the above request?

] A. You can always attach maximum of ten local SSD devices to a VM instance

If a resource is not available, you won’t be able to create new resources


of that type, even if you still have remaining quota in your region or
] B.
project and  you can attach up to eight local SSD devices for 3 TB of
total local SSD storage space per instance

Launch the instance first and add the local SSD drives later for optimal
] C.
performance.

] D. Request changes to quota from the Quotas  page in the GCP Console

Explanation:

Answer: B

8 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Option B is the CORRECT because, Each local SSD is 375 GB in size, but you can attach
up to eight local SSD devices for 3 TB of total local SSD storage space per instance. If a
resource is not available, you won’t be able to create new resources of that type, even if
you still have remaining quota in your region or project.

Option A is INCORRECT because you can only attach up to 8 local SSD devices to a VM
instance also if the resource isn’t available you can’t create the resource.

Option  C is INCORRECT because you can attach the local SSD devices to an Instance
while launching a VM instance.

Option D is INCORRECT because you can only attach up to 8 local SSD devices to a VM
instance that is the limit.

Read more about it here: https://cloud.google.com/compute/docs/disks/local-ssd

https://cloud.google.com/compute/quotas     

Ask our Experts Rate this Question? v u

Question 7 Unattempted

Domain : Other

You have a Kubernetes cluster with 1 node-pool. The cluster receives a lot of traffic and
needs to grow. You decide to add a node. What should you do?

Use "gcloud container clusters resize" with the desired number of


] A.
nodes. 

] B. Use "kubectl container clusters resize" with the desired number of nodes.

Edit the managed instance group of the cluster and increase the number of
] C.
VMs by 1.

] D. Edit the managed instance group of the cluster and enable autoscaling.

Explanation:

Correct answer A

9 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Feedback

A is correct because this resizes the cluster to the desired number of nodes.

B is not correct because you need to use gcloud, not kubectl.

C is not correct because you should not manually manage the MIG behind a cluster.

D is not correct because you should not manually manage the MIG behind a cluster.

Ask our Experts Rate this Question? v u

Question 8 Unattempted

Domain : Other

Using the principle of least privilege, your colleague Bob needs to be able to create new
instances on Compute Engine in project 'Project A'. How should you give him access
without giving more permissions than is necessary?

] A. Give Bob Compute Engine Instance Admin Role for Project A.

] B. Give Bob Compute Engine Admin Role for Project A.

] C. Create a shared VPC that Bob can access Compute resources from.

] D. Give Bob Project Editor IAM role for Project A.

Explanation:

Correct answer A

A (Correct answer) - Give Bob Compute Engine Instance Admin Role for Project A - The
Compute Engine Instance Admin role only gives access to create/edit compute engine
resources such as instances, disks, and snapshots.

B - Give Bob Compute Engine Admin Role for Project A - The Compute Engine Admin
role also gives admin access to network resources as well, which is too much.

10 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

C - Create a shared VPC that Bob can access Compute resources from – shared VPC is
not for granting user role. For example, even if you create shared VPC between “Project
A” and “Project B”, to meet the requirement, you still need to grant Bob Compute Engine
Instance Admin Role for Project A.

D - Give Bob Project Editor IAM role for Project A – that’ll be too much for create new
instances on Compute Engine in project 'Project A'

Ask our Experts Rate this Question? v u

Question 9 Unattempted

Domain : Other

You have an application server running on Compute Engine in the europe-west1-d zone.
You need to ensure high availability and replicate the server to the europe-west2-c zone
using the fewest steps possible. What should you

Create a snapshot from the disk. Create a disk from the snapshot in the
] A.
europe-west2-c zone. Create a new VM with that disk.

Create a snapshot from the disk. Create a disk from the snapshot in the
] B. europe-west1-d zone and then move the disk to europe-west2-c. Create a
new VM with that disk.

Use "gcloud" to copy the disk to the europe-west2-c zone. Create a new VM
] C.
with that disk.

Use "gcloud compute instances move" with parameter "--destination-zone


] D.
europe-west2-c" to move the instance to the new zone.

Explanation:

Correct answer A

A is correct because this makes sure the VM gets replicated in the new zone.

B is not correct because this takes more steps than A.

C is not correct because this will generate an error, because gcloud cannot copy disks.

11 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

D is not correct because the original VM will be moved, not replicated.

Ask our Experts Rate this Question? v u

Question 10 Unattempted

Domain :Planning and con�guring a cloud solution

You are working for a fast growing startup which has user base in US and Europe. Until
now the company had all servers in Oregon region and has now decided to launch a
replica of the entire infrastructure in EU region as well.
You started migration process with the least used server by creating snapshot of its disk
and moving it to London region. Once the snapshot was copied you launched a fresh VM
using the snapshot but discovered that few of the files were corrupted. What can be the
reason?

] A. You cannot launch an instance from a snapshot.

] B. Snapshot was taken on a running VM.

As the region was changed all the files were not decrypted by properly
] C.
which has resulted in data corruption.

] D. None of the above.

Explanation:

Answer B

Option B is correct: It is never recommended by Google to create a snapshot of running


because this might corrupt data. You must always stop the instance and take a snapshot.

Option A is incorrect: You can definitely launch a VM from an existing snapshot.

Option C is incorrect: As the encryption was done using Google managed key, it is the
responsibility of Google to decrypt and re-encrypt the files.

Option D is incorrect: As B is the correct option this is an invalid choice.

Link:

12 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

https://cloud.google.com/compute/docs/disks/create-snapshots

Ask our Experts Rate this Question? v u

Question 11 Unattempted

Domain :Planning and con�guring a cloud solution

Being a Senior Cloud Engineer of the company, you are asked to launch a managed
MySQL DB using custom VPC with network range of 172.17.0.0/16 on Google Cloud
keeping security at utmost priority allowing team members to access it only over private
channel.
You completed the setup with all the requirements, but developers are unable to access
DB over the private network via application hosted on VM. What can be the reason?

] A. You did not whitelist 172.17.0.0/16 in the firewall.

] B. This is a reserved IP range hence cannot be used.

] C. You need to use proxy to connect over private IP.

] D. None of the above.

Explanation:

Answer B

Option B is correct: The IP range 172.17.0.0/16 is reserved for docker bridge network. Any
Cloud SQL instances created with an IP in that range will be unreachable. Connections
from any IP within that range to Cloud SQL instances using private IP will fail.

Option A is incorrect: As the range is reserved by Google even whitelisting it will not be
of any help.

Option C is incorrect: You do not need proxy in this case because you are trying to
access DB on the same network.

Option D is incorrect: As B is the correct option this is an invalid choice.

13 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Link:

https://cloud.google.com/sql/docs/mysql/configure-private-ip

Ask our Experts Rate this Question? v u

Question 12 Unattempted

Domain :Planning and con�guring a cloud solution

A new client has approached your company with a requirement that they want to host a
serverless on Google Cloud, but before that want you to give them price estimate of
running serverless application using Cloud Function. Which all parameters will you
consider while calculating price using Google Pricing Calculator?

] A. Type, Execution Time and Invocations.

] B. Memory, CPU, Execution Time and Invocations.

] C. Type, Bandwidth, Execution Time and Invocations.

] D. Memory, Execution Time and Bandwidth.

Explanation:

Answer C

Option C is correct: You will need four parameters to give your client an estimate of
running Cloud Functions. These are: Type, Bandwidth, Execution Time and Invocations
per month.

Option A, B and D are incorrect because they are not complete set of parameters
required to calculate estimate of running Cloud Functions on Google Cloud.

Link:

https://cloud.google.com/functions/pricing

14 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Ask our Experts Rate this Question? v u

Question 13 Unattempted

Domain :Planning and con�guring a cloud solution

Your managers want you to suggest a low-cost storage option that could be used to
share read-only data across multiple instances with high performance and no edge
caching. Which storage option would you suggest?

] A. Cloud Storage

] B. Persistent Disk

] C. Cloud Filestore

] D. Firebase

Explanation:

Answer B

B is correct: Persistent disks are used to share read-only data across multiple instance
with high performance and no edge caching.

A is incorrect: Cloud Storage is reliable object storage with global edge-caching service

C is incorrect: Cloud Filestore is fully managed file storage service with high cost

D is incorrect: Firebase is scalable storage used for mobile app

Link:

https://cloud.google.com/products/storage/

Ask our Experts Rate this Question? v u

15 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Question 14 Unattempted

Domain :Setting up a cloud solution environment

Your teammate launched 3 instances using gcloud compute instances create command
with all the required flags. After few mins, you checked the console and found 0
instances in the GCE virtual machine section. How would you identify the project against
which the command executed?

] A. gcloud auth application-default

] B. gcloud projects list

] C. gcloud debug

] D. gcloud config list

Explanation:

Answer D

D is correct: This command would list the properties for the currently active
configurations.

B in incorrect: The following command will list all the projects that are created in a
particular GCP account

A,C are incorrect: The following commands doesn’t support the desired result.

Link:

https://cloud.google.com/sdk/gcloud/reference/config/list

Ask our Experts Rate this Question? v u

Question 15 Unattempted

Domain :Setting up a cloud solution environment

16 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

As a cloud engineer, you have been asked to upgrade the free trial of your account and
rename it to a production-inventory-system. You are getting permission denied error
while making the changes. Which of the following permission will solve the problem?

] A. billing.accounts.update

] B. Billing.account.upgrade

] C. billing.account.update

] D. billing.accounts.upgrade

Explanation:

Answer A

A is correct: The required permission is billing.accounts.update on Billing Account


resource.

B, C and D are invalid choices or commands

Link:

https://cloud.google.com/billing/docs/how-to/custom-roles

Ask our Experts Rate this Question? v u

Question 16 Unattempted

Domain :Planning and con�guring a cloud solution

Your client wants to migrate an application to Google Cloud which has 15 TB of relational
data. The database is growing rapidly by 10 GB everyday. In addition, to support the
traffic, at least 10 read replicas are required. Which of the following service would you
meet the requirements?

] A. Cloud Storage

17 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

] B. BigQuery

] C. Cloud Spanner

] D. Cloud Bigtable

Explanation:

Answer C

C is correct: Cloud Spanner is globally scalable, fully managed, enterprise relational


database with automatic replication.

A is incorrect: Cloud Storage is reliable object storage with global edge-caching service

B is incorrect: BigQuery is a serverless cloud data warehouse

D is incorrect: BigTable is a petabyte scale, fully managed NoSQL database

Link:

https://cloud.google.com/spanner

Ask our Experts Rate this Question? v u

Question 17 Unattempted

Domain :Planning and con�guring a cloud solution

Your client wants to develop a new cost effective web application that runs on serverless
platform using Cloud Function, Cloud Storage, Pub/Sub and Cloud CDN. The expected
data would be 20 GB. Which of the following database would be the most suitable
schemaless option to support the serverless functionality?

] A. Cloud BigTable

] B. BigQuery

18 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

] C. Cloud Spanner

] D. Cloud Firestore

Explanation:

Answer D

D is correct: Cloud Firestore is a fast, fully managed, serverless, cloud-native NoSQL


document database that simplifies storing, syncing, and querying data for your mobile,
web, and IoT apps at global scale

A is incorrect: BigTable is a petabyte-scale, fully managed NoSQL database.

B is incorrect: BigQuery is serverless, highly scalable, cost effective data warehouse.

C is incorrect: Spanner is a fully managed relational database.

Link:

https://cloud.google.com/firestore

Ask our Experts Rate this Question? v u

Question 18 Unattempted

Domain :Deploying and implementing a cloud solution

You have created a pre-populated PersistentVolume disk as ReadOnlyMany, when you


try to mount the volume to a POD, you get failed to mount error, what could be the most
likely reason for this failure?

You created a PersistentVolume but did not create a


] A.
PersistentVolumeClaim

] B. You have not specified the correct mount point in your pod.yaml file

] C. You entered an incorrect PersistentVolume name in the pod.yaml file 

19 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

The pod.yaml file doesn’t have permission to mount the volume as it is


] D.
created with ReadOnlyMany access.

Explanation:

Answer A

A is correct: In order to mount a persistent disk, you need to create a


PersistentVolumeClaim after creating a PersistentVolume and then attach the
PersistentVolumeClaim to the pod.

B is incorrect: A mount point is a user defined attribute and could be anything

C is incorrect: You cannot give a PersistentVolume name in pod.yaml, it should always be


PersistentVolumeClaim

D is incorrect: ReadOnlyMany permissions does not derive the pod.yaml

Link:

https://cloud.google.com/kubernetes-engine/docs/how-to/persistent-volumes
/readonlymany-disks

Ask our Experts Rate this Question? v u

Question 19 Unattempted

20 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Domain :Deploying and implementing a cloud solution

Which of the following command could be used to autoscale a replication controller


“foo” with number of pods between 1 to 10 having target cpu utilization at 80%?

] A. kubectl autoscale deployment foo --min=1 --max--10 --cpu-percent=80

] B. kubectl rc --autoscale foo --min=1 --max=10 --cpu-percentage=80

] C. kubectl deployment --autoscale foo --min=1 --max--10 --cpu-percent=80

] D. kubectl autoscale rc foo --max=10 --cpu-percentage=80

Explanation:

Answer D

D is correct: This command is used to autoscale a replication controller with max 10


pods. It is important to specify --max flag as it defines the target pods that could be
launched when cpu reaches 80%.

A is incorrect: The following command is used to autoscale a deployment and not rc

B & C is incorrect: Both the commands are incorrect.

Link:

https://cloud.google.com/kubernetes-engine/docs/how-to/scaling-apps

Ask our Experts Rate this Question? v u

Question 20 Unattempted

Domain :Ensuring successful operation of a cloud solution

Your client has a web application that is currently using a single GCE to read the
messages from a pub/sub topic, process them and store them in Cloud Bigtable by its
unique order id. When a user uploads an order to Cloud Storage, it triggers a Cloud
Function that inserts a message to pub/sub topic. The traffic is expected to increase next

21 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

week and as a cloud engineer, you are expected to resolve any possible auto scaling
problem.
Which service is most likely to scale when the traffic is increased?

] A. Cloud Storage

] B. Cloud Bigtable

] C. GCE

] D. Pub/Sub

Explanation:

Answer C

B. GCE is not a managed service and hence auto scaling is set up manually by using
Managed Instance Group while architecting the infrastructure.

A, B and D are incorrect: These are the managed services and hence auto scaling is
managed by GCP

Link:

https://cloud.google.com/compute/docs/autoscaler

Ask our Experts Rate this Question? v u

Question 21 Unattempted

Domain :Ensuring successful operation of a cloud solution

You a Senior Cloud Engineer doing POC on a business-critical application having


database deployed on a GCE virtual machine. The requirement is to have a disk that
supports upto 35,000 IOPS per instance. Which of the following disk is suitable to meet
the requirement?

] A. Standard Persistent Disk

22 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

] B. SSD Persistent Disk

] C. Local SSD (SCSI)

] D. Local SSD (NVMe)

Explanation:

Answer B

B is correct: SSD Persistent Disk supports upto 15000-60000 IOPS per instance

A is incorrect: Standard Persistent Disk supports upto 3000 IOPS

C is incorrect: SCSI supports upto 400000 IOPS

D is incorrect: NVMe supports upto 680000 IOPS

Link:

https://cloud.google.com/compute/docs/disks

Ask our Experts Rate this Question? v u

Question 22 Unattempted

Domain :Con�gure access and security

John & co has deployed an application using Google App Engine standard environment.
You have been asked to update the cron schedules and default cookie expiration time,
which of the following predefined role has access to update default cookie expiration but
no access to update cron schedules?

] A. App Engine Service Admin

] B. App Engine Admin

] C. App Engine Deployer

23 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

] D. App Engine Code Viewer

Explanation:

Answer B

B is correct: As per google docs, App Engine Admin has access to update default cookie
expiration but no access to update cron schedules

A, C & D are incorrect: None of the other predefined roles have permission to perform
either of the operations

Link:

https://cloud.google.com/appengine/docs/standard/python/roles

Ask our Experts Rate this Question? v u

Question 23 Unattempted

Domain :Con�gure access and security

You company has uploaded some business critical documents to Cloud Storage and
your project manager wants you to restrict access to the objects by using ACLs. Which of
the following permission would allow you to update the object ACLs?

] A. storage.objects.update

] B. storage.objects.setIamPolicy

] C. storage.objects.create

] D. storage.objects.getIamPolicy

Explanation:

Answer B

24 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

B is correct: As per google docs, storage.objects.setIamPolicy allowss user to update


object ACLs.

A is incorrect: Update object metadata, excluding ACLs

C is incorrect: Add new objects to the bucket

D is incorrect: Read object ACLs, returned as IAM policies

Link:

https://cloud.google.com/storage/docs/access-control/iam-permissions

Ask our Experts Rate this Question? v u

Question 24 Unattempted

Domain :Setting up a cloud solution environment

Which of the following role provide granular access for a specific service and is managed
by GCP?

] A. Custom

] B. Predefined

] C. Admin

] D. Primitive

Explanation:

Answer B

B is correct: Predefined roles are managed roles and provide service specific access.

A is incorrect: Provide granular access for a specific service but managed by users

C is incorrect: Invalid role type

25 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

D is incorrect: Concrete roles, existed prior to IAM

Link:

https://cloud.google.com/iam/docs/understanding-roles

Ask our Experts Rate this Question? v u

Question 25 Unattempted

Domain :Setting up a cloud solution environment

When working on billing dashboard, which of the following option would lead you to cost
details for a specific invoice month?

] A. Report

] B. Cost Breakdown

] C. Cost Table

] D. Billing Export

26 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Explanation:

Answer C

C is correct: The cost table gives a detailed tabular view of monthly costs for a given
invoice.

A is incorrect: Lets you view your costs at a glance to discover and analyze trends.

B is incorrect: Gives you a waterfall view of your costs

D is incorrect: Billing exports is used for monitoring, analyzing and optimizing costs.

Link:

https://cloud.google.com/billing/docs/how-to/cost-table

Ask our Experts Rate this Question? v u

Question 26 Unattempted

Domain :Planning and con�guring a cloud solution

Your client wants to serve content using Cloud Storage that allow similar performance
advantage as regions, but also wants higher availability that comes with being geo-
redundant. You plan to use dual region to meet his requirement. Choose the regions that
does not fall under dual region compatibility. (Select 2)

A. nam4

B. us

C. eur4

D. eu

Explanation:

Answer B and D

27 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

B and D correct: us and eu are supported under multi-region and not in dual region

A and C are incorrect: The following 2 regions are currently supported in dual region.

Link:

https://cloud.google.com/storage/docs/locations

Ask our Experts Rate this Question? v u

Question 27 Unattempted

Domain :Planning and con�guring a cloud solution

How many instance-hours are supported by an App Engine as free daily usage quota
when scaling an instance using Automatic Scaling type? 

] A. 28

] B. 8

] C. 35

] D. 10

Explanation:

Answer A

A is correct: As per google documentation, automatic scaling has a free daily usage
quota of 28 instance hours

B is incorrect: Free usage quota of 8 instance-hours is supported by Manual and Basic


scaling

C and D are incorrect: Invalid choices

Link:

28 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

https://cloud.google.com/appengine/docs/standard/python/how-instances-are-
managed

Ask our Experts Rate this Question? v u

Question 28 Unattempted

Domain :Deploying and implementing a cloud solution

You created a VPC with a CIDR block of 10.40.0.0/16 with 2 subnets of CIDR range
10.40.1.0/24 and 10.40.2.0/24. What would be the default routes within this virtual private
connection having the broadest CIDR range?

] A. 10.40.0.0/0

] B. 10.40.3.0/24

] C. 0.0.0.0/0

] D. 0.0.0.0/16

Explanation:

Answer C

C is correct: The system generated default route is 0.0.0.0/0 as it is the broadest


possible range.

A, B and D are incorrect routes

Link:

https://cloud.google.com/vpc/docs/routes

Ask our Experts Rate this Question? v u

Question 29 Unattempted

29 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Domain :Deploying and implementing a cloud solution

There are 5 VPC networks in your staging project created for 5 different applications.
Each network has its own CIDR range and firewall rules. You are asked to list the firewall
rules of network 3 to perform an update. Select the appropriate response.

] A. gcloud compute firewall-rules list --filter network=network 3

] B. gcloud vpc network=network 3 --list firewall-rules

] C. gcloud compute network=network 3 --list firewall-rules

] D. gcloud vpc firewall-rules list --filter network=network 3

Explanation:

Answer A

A is correct: The firewall-rules are defined under VPC but when using gcloud, they can
only be accessed by calling compute api and this the following command lists the
firewall-rules for the given network.

B, C & D is incorrect: These commands are invalid.

Link:

https://cloud.google.com/vpc/docs/using-firewalls

Ask our Experts Rate this Question? v u

Question 30 Unattempted

Domain :Ensuring successful operation of a cloud solution

Your application servers are deployed in private subnet and you connect to an
application instance using a bastion host, you connect to the bastion host using Console
Shell and then ssh to the respective application instance. Unfortunately, Cloud Shell is
taking a lot of time to respond and you manager wants you to ssh to the instance to fix an
application specific configuration. What command would you use to SSH into the server

30 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

from public end?

] A. gcloud connect ssh username@application-instance

] B. gcloud compute ssh username@bastion-host

] C. gsutil connect ssh username@bastion-host

] D. gsutil compute ssh username@application-server

Explanation:

Answer B

B is correct. The correct syntax is gcloud compute ssh + [USERNAME]+@[SERVERNAME].


From public end, you can only connect to bastion host, hence you need to connect to
bastion host first and then connect to application instance.

A, C and D are incorrect: Incorrect commands

Link:

https://cloud.google.com/compute/docs/instances/connecting-to-instance

Ask our Experts Rate this Question? v u

Finish Review

31 of 32 10/7/19, 1:08 PM
Whizlabs Online Certification Training Courses fo... https://www.whizlabs.com/learn/course/quiz-resul...

Certi�cation Company Follow us

Cloud Certi�cation Support


hom
Java Certi�cation Discussions

PM Certi�cation Blog

Big Data Certi�cation

© Copyright 2019. Whizlabs Software Pvt. Ltd. All Right Reserved.

32 of 32 10/7/19, 1:08 PM

You might also like