Question 171
You’re working on creating a script that can extract the IP address of a Kubernetes Service. Your coworker sent you a code snippet that they had saved.
Which one is the best starting point For your code?
A. kubectl get svc -o filtered- json=’{.items[*].status.loadBalancer.ingress[0].ip}’
B. kubectl get svc -o jsonpath=’{.items[*].status.loadBalancer.ingress[0].ip}’
C. kubectl get svc -o html
D. kubectl get svc
Question 172
You have a Linux server running on a custom network. There’s an allow firewall rule with an IP Filter of 0.0.0.0/0 with a protocol/port of tcp:22. The logs on the instance show a constant stream Of attempts from different IP addresses, trying to connect via SSH. You suspect this is a brute Force attack.How might you change the firewall rule to stop this from happening and stil enable access for Legit users?
A. Stop the instance.
B. Deny all traffic to port 22.
C. Change the port that SSH is running on in the instance and change the port number in the Firewall rule.
D. Change the IP address range in the filter to only allow known IP addresses.
Question 173
You’re about to deploy your team’s App Engine application. They’re using the Go runtime with a Standard Environment.
Which command should you use to deploy the application?
A. gcloud app deploy app.yaml
B. gcloud app-engine apply app.yaml
C. gcloud app apply app.yaml
D. gcloud app-engine deploy app.yaml
Question 174
You need to create a new development Kubernetes cluster with 4 nodes. The cluster wil be Named linux- academydev- cluster.
Which of the following truncated commands wil create a Cluster?
A. gcloud container clusters create linux-academy-dev- cluster –num-nodes 4
B. kubectl clusters create linux-academy-dev-cluster 4
C. kubectl clusters create linux-academy-dev-cluster –num-nodes 4
D. gcloud container clusters create linux-academy-dev-cluster 4
Question 175
You have a Cloud Storage bucket that needs to host static web assets. How do you make the Bucket public?
A. Trick question. Don’t ever make a bucket public.
B. Check the “make public” box in the UI.
C. Set allUsers to have the Storage Object Viewer role.
D. gsutil make-public gs://bucket-name
Question 176
Your team has chosen to use Deployment Manager to create the Compute Engine infrastructure For your application. You’ve already run the gcloud deployment-manager deployments create Command to create the deployment.You’ve updated two resources in the template and need to deploy the change. What command Should you use?
A. gcloud deployment-manager resources apply
B. gcloud deployment-manager deployments update
C. gcloud deployment-manager resources update
D. gcloud deployment-manager deployments apply
Question 177
Your team needs to set up a new Jenkins instance as quickly as possible. What’s the best way To get it up- and-running? (two answers)
A. Use Google’s Managed Jenkins Service.
B. Deploy the jar file to a Compute Engine instance.
C. Search the marketplace for Jenkins and install with Cloud Launcher.
D. Create a Deployment Manager template and deploy it.
Question 178
Your engineers need to pass database credentials to a Kubernetes Pod. The YAML they'reusing looks similar to the following:
What is Google's recommended best practice for working with sensitive information inside of Kubernetes?
A. Store the credentials in a ConfigMap
B. Mount the credentials in a volume.
C. Use an environment variable.
D. Store the credentials in a Secret.
Question 179
You’re trying to provide temporary access to some files in a Cloud Storage bucket. You want to Limit the time that the files are available to 10 minutes. With the fewest steps possible, what is The best way to generate a signed URL?
A. In the UI select the objects and click the Generate Signed URL button.
B. Create a service account and JSON key. Use the gsutil signurl -t 10m command and pass in The JSON key and bucket.
C. In the UI select the objects and click the “Sign With Key” button.
D. Create a service account and JSON key. Use the gsutil signurl -d 10m command and pass in The JSON key and bucket.
Question 180
Your team has some new functionality that they want to roll out slowly so they can monitor for Errors. The change contains some significant changes to the user interface. You’ve chosen to Use traffic splitting to perform a canary deployment. You’re going to start by rolling out the code To 15% of your users. How should you go about setting up traffic splitting?
A. Deploy the new version. Split the traffic using an IP or cookie based distribution.
B. Use the gcloud app deploy command with the distribution flag to deploy and split the traffic in One command.
C. Deploy the new version using the no-promote flag. Split the traffic using a random Distribution.
D. Deploy the new version using the no-promote flag. Split the traffic using distribution.
