Deploying & Implementing a Cloud Solution

Which gcloud command is used to create a new Compute Engine virtual machine instance named 'web-server-1'?

You need to ensure that a specific Compute Engine instance always restarts automatically if it crashes or is terminated by a system event (like hardware failure). What should you do?

You are creating a Managed Instance Group (MIG) that needs to scale automatically based on CPU utilization. Which TWO resources must you create before or during the MIG creation? (Select TWO)

You have created a new Google Kubernetes Engine (GKE) cluster. You need to configure your local kubectl command-line tool to communicate with this cluster. Which command should you run?

You are deploying a containerized application to GKE. You want to ensure that the application is exposed to the internet and receives an external IP address. Which Kubernetes resource type should you create?

You are deploying a GKE Autopilot cluster. You need to deploy a workload that requires specific hardware accelerators (GPUs). Which TWO statements are true regarding this deployment? (Select TWO)

You need to execute a lightweight piece of code every time a new file is uploaded to a specific Cloud Storage bucket. Which service is the MOST appropriate choice?

You are deploying a container image to Cloud Run. You want to ensure that unauthenticated users cannot access the service. How should you configure the deployment?

You have a CSV file named data.csv on your local machine. You need to upload this file to a Cloud Storage bucket named my-data-bucket. Which command should you use?

You need to load a large JSONL (JSON Lines) file from Cloud Storage into a BigQuery table. Which TWO methods can you use to accomplish this? (Select TWO)

You are creating a custom VPC network. You need to create a subnet in the us-west1 region with a CIDR range of 10.0.1.0/24. What is the correct approach?

You have Compute Engine instances in a VPC subnet that do not have external IP addresses. They need to download software updates from the internet. Which TWO resources must you configure to allow this outbound traffic securely? (Select TWO)

You need to view the logs of a specific pod named frontend-pod-123 running in your GKE cluster to troubleshoot an application error. Which command should you use?

Your GKE cluster is running out of resources, and new pods are stuck in the Pending state. You are using a Standard GKE cluster. Which TWO actions could resolve this issue? (Select TWO)

You are deploying a web application on Compute Engine. You want the application to automatically scale out (add more instances) when CPU utilization exceeds 70%, and scale in when traffic drops. You also want instances to be automatically recreated if they crash.

What is the correct sequence of resources you need to create?

Your security team requires that all SSH access to Compute Engine instances be tied to users' Google Cloud IAM identities, rather than managing individual SSH keys manually. You need to configure this for a new project.

Which TWO steps should you take to implement this? (Select TWO)

You need to deploy a new Google Kubernetes Engine (GKE) Standard cluster named 'prod-cluster' in the 'us-central1-a' zone with exactly 3 nodes.

Which gcloud command should you use?

You have a running GKE cluster and you have authenticated your local kubectl tool to it. You want to deploy a containerized application using an image named 'gcr.io/my-project/my-app:v1' and ensure 3 replicas are running.

Which command is the simplest way to achieve this imperatively?

You are deploying a new application to Cloud Run. The application is packaged in a container image located in Artifact Registry. You want the application to be publicly accessible over HTTPS.

Which gcloud command should you use?

You are writing a Cloud Function in Node.js that needs to execute every time a new file is uploaded to a specific Cloud Storage bucket.

How should you configure the trigger for this Cloud Function?

You have a 50 GB CSV file stored locally on your on-premises server. You need to load this data into a BigQuery table named 'sales_data' in the dataset 'company_metrics'.

Which command should you use?

You are migrating a MySQL database to Cloud SQL. You have exported your on-premises database to a SQL dump file. What is the recommended sequence of steps to import this data into your new Cloud SQL instance?

You are setting up a custom-mode Virtual Private Cloud (VPC) network. You need to create a subnet in the 'us-west1' region with the CIDR block '10.0.1.0/24'.

Which TWO gcloud commands must you run to achieve this? (Select TWO)

You have a 3-tier application deployed on Compute Engine: Web, App, and Database tiers. You need to create firewall rules to ensure that only the Web tier can communicate with the App tier, and only the App tier can communicate with the Database tier.

According to Google Cloud best practices, which TWO methods should you use to target these specific instances in your firewall rules? (Select TWO)

You deployed a new container to your GKE cluster, but the application is not responding. You run kubectl get pods and see that the Pod status is 'CrashLoopBackOff'.

What is the MOST appropriate next command to diagnose why the container is crashing?

Your GKE cluster is running out of capacity. You need to permanently increase the number of nodes in an existing node pool named 'pool-1' from 3 to 5.

Which TWO methods can you use to achieve this? (Select TWO)

You need to quickly launch a new Compute Engine virtual machine named 'web-server-01' in the us-central1-a zone using the e2-medium machine type.

Which gcloud command should you use?

You have deployed a web application on a Managed Instance Group (MIG). You want the group to automatically add more instances when the average CPU utilization across the group exceeds 70%, and remove instances when it drops below that threshold.

How should you configure the MIG?

An external contractor needs SSH access to a specific Compute Engine instance named 'db-admin-vm' to perform maintenance. You do not want to grant them IAM access to the GCP project, and you do not want to use OS Login. You have generated an SSH key pair.

Which TWO steps must you take to grant them access using this key pair? (Select TWO)