Question 201
Using principal of least privilege and allowing for maximum automation, what steps can you take to store audit logs for long-term access and to allow access for external auditors to view? (Choose two)
A. Generate a signed URL to the Stackdriver export destination for auditors to access.
B. Create an account for auditors to have view access to Stackdriver Logging.
C. Export audit logs to Cloud Storage via an export sink.
D. Export audit logs to BigQuery via an export sink.
Question 202
You created an update for your application on App Engine. You want to deploy the update without impacting your users. You want to be able to roll back as quickly as possible if it fails. What should you do?
A. Delete the current version of your application. Deploy the update using the same version identifier as the deleted version.
B. Notify your users of an upcoming maintenance window. Deploy the update in that maintenance window.
C. Deploy the update as the same version that is currently running.
D. Deploy the update as a new version. Migrate traffic from the current version to the new version.
Question 203
Using the principle of least privilege, your colleague Bob needs to be able to create new instances on Compute Engine in project 'Project A'. How should you give him access without giving more permissions than is necessary?
A. Give Bob Compute Engine Instance Admin Role for Project A.
B. Give Bob Compute Engine Admin Role for Project A.
C. Create a shared VPC that Bob can access Compute resources from.
D. Give Bob Project Editor IAM role for Project A.
Question 204
You need to create a new Kubernetes Cluster on Google Cloud Platform that can autoscale the number of worker nodes. What should you do?
A. Create a cluster on Kubernetes Engine and enable autoscaling on Kubernetes Engine.
B. Create a cluster on Kubernetes Engine and enable autoscaling on the instance group of the cluster.
C. Configure a Compute Engine instance as a worker and add it to an unmanaged instance group. Add a load balancer to the instance group and rely on the load balancer to create additional Compute Engine instances when needed.
D. Create Compute Engine instances for the workers and the master and install Kubernetes. Rely on Kubernetes to create additional Compute Engine instances when needed.
Question 205
You are creating a solution to remove backup files older than 90 days from your backup Cloud Storage bucket. You want to optimize ongoing Cloud Storage spend. What should you do?
A. Write a lifecycle management rule in XML and push it to the bucket with gsutil`
B. Write a lifecycle management rule in JSON and push it to the bucket with gsutil
C. Schedule a cron script using gsutil ls -lr gs://backups/** to find and remove items older than 90 days
D. Schedule a cron script using gsutil ls -l gs://backups/** to find and remove items older than 90 days and schedule it with cron
Question 206
You are working on a project with two compliance requirements. The first requirement states that your developers should be able to see the Google Cloud Platform billing charges for only their own projects. The second requirement states that your finance team members can set budgets and view the current charges for all projects in the organization. The finance team should not be able to view the project contents. You want to set permissions. What should you do?
A. Add the finance team members to the default IAM Owner role. Add the developers to a custom role that allows them to see their own spend only.
B. Add the finance team members to the Billing Administrator role for each of the billing accounts that they need to manage. Add the developers to the Viewer role for the Project.
C. Add the developers and finance managers to the Viewer role for the Project.
D. Add the finance team to the Viewer role for the Project. Add the developers to the Security Reviewer role for each of the billing accounts.
Question 207
A SysOps admin has configured a lifecycle rule on an object versioning enabled multi-regional bucket.
Which of the following statement effect reflects the following lifecycle config?
A. Archive objects older than 30 days and move objects to Coldline Storage after 365 days if the storage class in Multi-regional
B. Delete objects older than 30 days and move objects to Coldline Storage after 365 days if the storage class in Multi-regional.
C. Delete archived objects older than 30 days and move objects to Coldline Storage after 365 days if the storage class in Multi-regional.
D. Move objects to Coldline Storage after 365 days if the storage class in Multi-regional First rule has no effect on the bucket.
Question 208
Using principal of least privilege and allowing for maximum automation, what steps can you take to store audit logs for long-term access and to allow access for external auditors to view? (Select Two)
A. Create account for auditors to have view access to Stackdriver Logging.
B. Export audit logs to Cloud Storage via an export sink.
C. Export audit logs to BigQuery via an export sink.
D. Create account for auditors to have view access to export storage bucket with the Storage Object Viewer role.
Question 209
You are creating a single preemptible VM instance named "preempt" to be used as scratch space for a single workload. If your VM is preempted, you need to ensure that disk contents can be re-used.
Which gcloud command would you use to create this instance?
A. gcloud compute instances create "preempt" --preemptible --no-boot-disk-auto-delete
B. gcloud compute instances create "preempt" --preemptible --boot-disk-auto-delete=no
C. gcloud compute instances create "preempt" --preemptible
D. gcloud compute instances create "preempt" --no-auto-delete
Question 210
You have a definition for an instance template that contains a web application. You are asked to deploy the application so that it can scale based on the HTTP traffic it receives. What should you do?
A. Create a VM from the instance template. Create a custom image from the VM's disk. Export the image to Cloud Storage. Create an HTTP load balancer and add the Cloud Storage bucket as its backend service.
B. Create an unmanaged instance group based on the instance template. Configure autoscaling based on HTTP traffic and configure the instance group as the backend service of an HTTP load balancer.
C. Create a managed instance group based on the instance template. Configure autoscaling based on HTTP traffic and configure the instance group as the backend service of an HTTP load balancer.
D. Create the necessary number of instances required for peak user traffic based on the instance template. Create an unmanaged instance group and add the instances to that instance group. Configure the instance group as the Backend Service of an HTTP load balancer.
