Domain 1.1: Setting up cloud projects and accounts

What is the highest level of the Google Cloud resource hierarchy?

You need to enable the Compute Engine API in a new project using the command line. Which command should you use?

You are setting up a new GCP environment. You need to grant a group of developers access to view resources in a specific project, but they should not be able to modify anything. Which TWO actions should you take? (Select TWO)

Your company is migrating to Google Cloud and needs to establish a resource hierarchy. You have three distinct departments: HR, Finance, and Engineering. Each department needs its own isolated environments for development and production, and billing must be tracked separately for each department. What is the MOST appropriate way to structure your GCP resource hierarchy?

You are managing access to a GCP project. You need to grant 15 developers the ability to view Compute Engine instances. The development team frequently has members joining and leaving. What is the MOST efficient way to manage their access?

You have created a new GCP project using the Cloud Console. You want to deploy a Cloud Function using the gcloud CLI, but you receive an error stating that the API is not enabled. Which gcloud command should you use to enable the Cloud Functions API?

You are starting a new project in Google Cloud and need to create a new GCP project and enable the Compute Engine API using the command line. Which sequence of gcloud commands should you use?

A new team member has joined your operations team. They need to be able to view all Compute Engine instances, their configurations, and their current state across your project, but they should not be able to start, stop, or modify any instances. Which predefined IAM role should you assign to this user?

Your company is migrating to Google Cloud. You currently manage all employee identities in an on-premises Microsoft Active Directory (AD). You want to use these existing identities to manage access to GCP resources without requiring users to remember a new set of passwords. Which TWO actions should you take to achieve this? (Select TWO)

You have recently joined a new team and need to set up a new Google Cloud project for a development environment. You want to use the Cloud SDK to create the project with the ID 'dev-env-789'. Which gcloud command should you use?

Your company uses Google Workspace. You need to grant a new developer, Alice, the ability to view all resources in your 'production-app' project, but she should not be able to modify anything. You want to follow the principle of least privilege using predefined roles. What should you do?

You have created a new GCP project and want to deploy a Compute Engine instance. However, when you try to run the deployment command, you receive an error stating that the Compute Engine API is not enabled. Which TWO methods can you use to enable the Compute Engine API for your project? (Select TWO)

You are starting a new initiative and need to create a new Google Cloud project using the command-line interface. Which gcloud command should you use?

A developer on your team needs to manage App Engine applications, including deploying new versions and splitting traffic. However, they should not be able to create Compute Engine instances or manage Cloud Storage buckets. Which predefined IAM role should you assign to this developer?

You have created a new Google Cloud project. You need to allow a specific group of developers to provision Compute Engine virtual machines. The Compute Engine API has not been enabled yet. Which TWO actions must you take to fulfill this requirement? (Select TWO)

What is the primary purpose of a Google Cloud project?

Your development team needs to manage Compute Engine instances in a specific project. They need to be able to start, stop, and configure VMs, but they should not be able to create new VMs or delete existing ones. Which TWO actions should you take to grant the appropriate access? (Select TWO)

You are automating the setup of a new Google Cloud project using a bash script. You need to enable the Compute Engine API for the project before your script can create any virtual machines. Which gcloud command should you use?

You are starting a new initiative and need to create a new Google Cloud project using the Cloud SDK. You want the project to be named 'data-analytics-prod' and you need to specify your organization ID (1234567890) so it is created in the correct hierarchy. Which gcloud command should you use?

Your company is migrating to Google Cloud and wants to manage user identities centrally. They currently use an on-premises Active Directory (AD). You need to ensure that users can authenticate to Google Cloud using their existing AD credentials and that user lifecycle management is automated. Which TWO actions should you take? (Select TWO)

You have just created a new Google Cloud project and want to deploy a containerized application using Google Kubernetes Engine (GKE). When you try to run the command to create the cluster, you receive an error stating that the API is not enabled. Which gcloud command should you use to enable the necessary API?