Google Cloud Associate Cloud Engineer - Full Practice Exam 1

1. A CI job runs outside Google Cloud and can present a trusted external identity token. It needs short-lived Google Cloud access without storing a service-account key. Which approach best fits?
2. A CI workload runs outside Google Cloud and can present a trusted repository identity token. It must deploy only one approved project without storing long-lived Google credentials. Which two design choices meet these requirements? Select 2 answers.
3. A Cloud Run service can overwhelm its database during a traffic surge. The team wants an upper bound on service instance growth and accepts possible queuing or errors at that bound. Which approach best fits?
4. A Cloud Run service sees latency from cold starts after quiet periods. The team accepts additional standing cost to keep capacity warm. Which approach best fits?
5. A company has hundreds of analysts with identical access requirements. Joiners and leavers must be managed without editing every project policy individually. Which approach best fits?
6. A company wants common IAM grants for every production project while keeping development grants separate. Projects already belong to one organization. Which approach best fits?
7. A company wants enterprise employees to access Google Cloud using its external identity provider without creating an independent password for every cloud identity. Which approach best fits?
8. A compliance team needs administrative activity evidence showing the principal, resource, and time of supported Google Cloud changes. Which approach best fits?
9. A CPU-intensive batch job checkpoints progress and can restart after interruption. Reducing compute cost is more important than continuous capacity availability. Which approach best fits?
10. A custom business role requires a stable set of supported permissions not covered narrowly by an existing predefined role. Which approach best fits?
11. A database replication setup copied an accidental delete to every replica. The team needs recovery to a time before the mistake. Which approach best fits?
12. A deployment must use one exact immutable container image rather than whichever artifact a mutable tag points to later. Which approach best fits?
13. A deployment needs more regional CPU quota than the project currently allows. The selected machine type and region are otherwise suitable. Which approach best fits?
14. A developer needs temporary access as a service account for debugging. Administrators want auditable delegation without sharing a private key. Which approach best fits?
15. A financial system requires relational transactions, strong consistency, and horizontal database scaling across regions. Which approach best fits?
16. A GKE workload's Pods cannot be scheduled because existing nodes lack capacity. More identical nodes can satisfy the requests. Which approach best fits?
17. A Kubernetes application consistently requests too little memory per Pod. The team wants resource-request recommendations or managed adjustments rather than more replicas. Which approach best fits?
18. A legacy application requires an NFS-mounted shared file system that several Compute Engine VMs can access concurrently. Which approach best fits?
19. A mobile application needs a document data model, client SDK integration, and real-time listeners for application records. Which approach best fits?
20. A new Cloud Run revision must receive only 5% of requests while the stable revision keeps the rest, with rapid reversal if errors rise. Which approach best fits?
21. A new project cannot deploy a service because its API is disabled. Billing is linked and the caller already has the required service permissions. Which approach best fits?
22. A policy requires the organization to control encryption-key lifecycle for a supported cloud data service. Which approach best fits?
23. A private VM needs outbound internet access for updates while remaining without an external IP address. Unsolicited inbound internet access is unnecessary. Which approach best fits?
24. A project already inherits a broad role from its parent folder. An administrator removes the same role from the project's local allow policy, but access remains. Which approach best fits?
25. A public web application needs HTTP host- and path-based routing across backends. The load balancer must understand application-layer request attributes. Which approach best fits?
26. A recovery plan needs a maximum acceptable amount of lost data expressed as elapsed time before an incident. Which approach best fits?
27. A service needs an alert when its error-rate metric exceeds a defined threshold for a sustained period. Which approach best fits?
28. A stateless HTTP container must scale with incoming requests. The team wants minimal server administration and does not require Kubernetes APIs. Which approach best fits?
29. A stateless web tier on Compute Engine must add or remove VMs automatically as CPU demand changes, using a consistent instance configuration. Which approach best fits?
30. A team must prohibit service-account key creation across a governed resource hierarchy, rather than merely discouraging developers from creating keys. Which approach best fits?
31. A team needs notification as actual or forecast spending approaches its monthly budget. It does not want resources automatically shut down. Which approach best fits?
32. A team needs the same infrastructure configuration in several environments, with reviewed changes and repeatable provisioning rather than console recreation. Which approach best fits?
33. A telemetry service performs enormous volumes of low-latency key-based reads and writes. Its wide-column data model does not require relational joins. Which approach best fits?
34. A VM needs a bootable block device for its operating system and an application that expects a local filesystem on attached storage. Which approach best fits?
35. An analyst needs read-only access to one dataset. The administrator must avoid granting unrelated project administration permissions. Which approach best fits?
36. An application already has an IAM role but a request is blocked by a matching applicable deny policy. Adding another allow binding did not help. Which approach best fits?
37. An application emits an important business event only in logs. Operations needs a numerical time series counting those events for alerting. Which approach best fits?
38. An application has elevated request latency across several services. The team needs to locate the slow dependency and inspect the detailed events for the same requests. Which two telemetry practices are most useful? Select 2 answers.
39. An application must tolerate a database primary's zonal failure with managed failover and minimal manual intervention. Which approach best fits?
40. An application needs to balance TCP traffic while preserving the original client source IP at the backend, without HTTP routing features. Which approach best fits?
41. An application needs versioned database passwords with controlled access, rather than keeping plaintext credentials in source code. Which approach best fits?
42. An application requires privileged operating-system configuration and a legacy VM image. The team accepts responsibility for guest OS maintenance. Which approach best fits?
43. An application stores images and exported files accessed by object name over APIs. It does not require a mounted file system. Which approach best fits?
44. An artifact repository needs control over who may upload or download application container images. Which approach best fits?
45. An enterprise wants its networking team to control subnets centrally while application teams deploy resources in separate projects using those subnets. Which approach best fits?
46. An existing PostgreSQL transactional application needs a managed database with minimal engine changes. It does not need worldwide horizontal relational scaling. Which approach best fits?
47. An external workload federation trust accepts tokens from an entire identity-provider tenant, but only one repository should deploy production workloads. Which approach best fits?
48. An operator must search application events around one failed request using its correlation ID and timestamp. Which approach best fits?
49. An organization must route matching logs from multiple projects to a centralized destination according to defined inclusion filters. Which approach best fits?
50. Analysts need managed SQL scans over a large historical dataset, with minimal warehouse infrastructure management. Which approach best fits?
51. Different GKE applications need distinct Google API permissions without sharing the node's broad identity. Which approach best fits?
52. Disaster-recovery objects are read about once a quarter and kept well beyond 90 days. Retrieval fees are acceptable. Which approach best fits?
53. Files are expected to be read about once a month and retained for more than 30 days. The team accepts access charges to reduce storage cost. Which approach best fits?
54. Finance needs detailed cloud spending data that can be queried with SQL and joined to internal cost-center records. Which approach best fits?
55. Frequently read objects need low access latency and no cold-storage minimum-duration economics. Which Cloud Storage class best fits?
56. Operations needs a searchable inventory of cloud resources and their metadata across the organization before planning a migration. Which approach best fits?
57. Several applications depend on Kubernetes custom resources and admission policies. The team wants a managed Kubernetes control plane. Which approach best fits?
58. Two independent companies need access to one published service through consumer-owned internal IPs, without exposing their entire VPC networks to each other. Which approach best fits?
59. Two VPC networks with non-overlapping address ranges need direct private connectivity. No transitive routing through either VPC is required. Which approach best fits?
60. Users report slow requests across several microservices. The team needs to identify which downstream call contributes most to end-to-end latency. Which approach best fits?

Comments — 0