Ensuring Successful Operation

You want to receive an email notification when your GCP spending exceeds $1000 this month. What should you configure?

You need to analyze your GCP billing data using complex SQL queries to understand cost trends across multiple projects and labels. What is the MOST efficient approach?

You need to securely connect to a Compute Engine Linux instance using SSH from your local terminal without managing SSH keys manually. Which command should you use?

A Compute Engine instance is running out of disk space. You have increased the size of the persistent disk in the Google Cloud Console. What is the next step you MUST perform to make the new space usable by the OS?

You want to create a custom 'golden image' from an existing Compute Engine instance to use for future deployments. Which TWO steps are recommended best practices before creating the image? (Select TWO)

You need to view the logs of a specific pod named frontend-pod-123 running in your GKE cluster to troubleshoot an application error. Which command should you use?

Your GKE cluster is running out of resources, and new pods are stuck in the Pending state. You are using a Standard GKE cluster. Which TWO actions could resolve this issue? (Select TWO)

You have deployed a new revision of a Cloud Run service. You want to route 10% of the traffic to the new revision for testing, while keeping 90% on the old revision. How can you achieve this?

You want to automatically transition objects in a Cloud Storage bucket to Archive storage if they haven't been accessed in 365 days. What should you configure?

You are managing a Cloud SQL for PostgreSQL instance. You need to ensure you can recover the database to a specific point in time within the last 7 days in case of accidental data deletion. Which TWO features must be enabled? (Select TWO)

You have a custom VPC with a subnet 10.0.0.0/24. You are running out of IP addresses in this subnet and need to expand it to 10.0.0.0/20. There are running VMs in the subnet. Which command should you use?

You have an internal application running on Compute Engine instances in a VPC. You want to expose this application to another VPC in a different GCP project owned by a different department, without using external IP addresses or VPC peering (due to overlapping IP ranges). What is the BEST solution?

In Google Cloud IAM, what is the fundamental difference between a primitive role (like Editor) and a predefined role (like Compute Instance Admin)?

A developer needs to view the configuration of Compute Engine instances and Cloud Storage buckets in a project, but should not be able to create, modify, or delete any resources. Which IAM role should you assign?

You need to grant a new team member access to manage Cloud SQL instances in a specific project. You want to follow the principle of least privilege. Which TWO actions should you take? (Select TWO)

You are creating a custom IAM role because predefined roles provide too much access. Which TWO statements are true regarding custom IAM roles? (Select TWO)

What is the primary purpose of a Google Cloud Service Account?

An application running on a Compute Engine VM needs to read files from a Cloud Storage bucket. What is the MOST secure way to grant the VM access to the bucket?

You need to run a script on your local on-premises workstation that interacts with GCP APIs. The script needs to authenticate as a service account. Which TWO steps are required? (Select TWO)

Your startup has a strict monthly cloud budget of $500. You want to be notified immediately if your spending exceeds $400, but you DO NOT want your services to be automatically shut down, as this would disrupt your users.

What should you configure?

Your finance team wants to perform complex SQL analysis on your GCP billing data to understand cost trends across multiple projects and labels over the past year.

What is the MOST efficient way to enable this analysis?

A developer accidentally misconfigured a Compute Engine instance, and it is now unresponsive. You need to restart the instance using the gcloud CLI.

Which command should you use?

You need to create a backup of a persistent disk attached to a Compute Engine instance. You want to ensure that you can quickly create new VMs in different regions using this exact disk state.

What should you create?

You have a Compute Engine instance that does NOT have an external public IP address. You need to SSH into this instance securely from your local laptop over the internet.

Which TWO actions must you take to enable this using Identity-Aware Proxy (IAP)? (Select TWO)

You deployed a new container to your GKE cluster, but the application is not responding. You run kubectl get pods and see that the Pod status is 'CrashLoopBackOff'.

What is the MOST appropriate next command to diagnose why the container is crashing?

Your GKE cluster is running out of capacity. You need to permanently increase the number of nodes in an existing node pool named 'pool-1' from 3 to 5.

Which TWO methods can you use to achieve this? (Select TWO)

You have deployed a new version (v2) of your application to Cloud Run. You want to test this new version with a small subset of users before fully rolling it out. You want 10% of traffic to go to v2, and 90% to remain on v1.

How should you configure this?

You have a Cloud Storage bucket containing millions of images. You want to automatically transition images older than 90 days to Nearline storage to save costs, and delete images older than 365 days.

What is the MOST efficient way to implement this?

You are about to run a complex SQL query in BigQuery that joins several multi-terabyte tables. You are concerned about how much this single query will cost.

How can you find out the exact amount of data the query will process BEFORE you run it?

Your custom-mode VPC has a subnet in 'us-east1' with the CIDR range 10.0.0.0/24. You have run out of IP addresses in this subnet and need to add more capacity. You want to do this without recreating the subnet or disrupting existing VMs.

What should you do?