Sample Questions and Answers
What should you use to detect anomalies in log events?
Cloud Monitoring
B. Cloud Trace
C. Log-based Metrics
D. Cloud Logging Alerts
Answer: D. Cloud Logging Alerts
Explanation: Alerts can be configured to detect anomalies in logs based on defined thresholds or patterns.
You are migrating a multi-tier app to GCP. You want least effort with highest compatibility. Choose:
Replatforming
B. Refactoring
C. Rehosting
D. Rebuilding
Answer: C. Rehosting
Explanation: Rehosting (lift and shift) involves moving applications with minimal changes and effort.
Which Google Cloud service offers an integrated data lakehouse for advanced analytics?
BigQuery Omni
B. Dataproc
C. BigLake
D. Cloud Storage
Answer: C. BigLake
Explanation: BigLake unifies data warehouses and lakes, allowing analytics across structured and unstructured data with consistent security.
What should you use to store and manage Docker container images in GCP?
Cloud Functions
B. Cloud Build
C. Artifact Registry
D. Cloud Storage
Answer: C. Artifact Registry
Explanation: Artifact Registry is the recommended service for managing container images and other artifacts securely and at scale.
Which resource is required to enable Cloud Interconnect?
Cloud Router
B. VPN Gateway
C. External HTTP(S) Load Balancer
D. Network Tag
Answer: A. Cloud Router
Explanation: Cloud Router dynamically manages routes for Cloud Interconnect connections and is required for BGP peering.
A customer wants to minimize downtime during a MySQL migration to Cloud SQL. What approach should you recommend?
Use dump and restore
B. Use Database Migration Service in continuous replication mode
C. Use manual replication
D. Use App Engine Datastore
Answer: B. Use Database Migration Service in continuous replication mode
Explanation: Continuous replication keeps the source and destination in sync, minimizing downtime.
What is the best way to ensure encryption keys are controlled by your organization?
Default Google-managed keys
B. Customer-supplied encryption keys (CSEK)
C. Customer-managed encryption keys (CMEK)
D. VPC SC
Answer: C. Customer-managed encryption keys (CMEK)
Explanation: CMEK allows organizations to create and control keys using Cloud KMS for encryption of GCP services.
You need to scan your GCP environment for security misconfigurations. Which tool should you use?
Cloud Armor
B. VPC Flow Logs
C. Security Health Analytics
D. Cloud Trace
Answer: C. Security Health Analytics
Explanation: It scans your projects and detects misconfigurations that could lead to vulnerabilities.
What GCP feature allows setting budget alerts for different teams?
Billing Export
B. Resource Manager
C. Cloud Budgets and Alerts
D. IAM Quotas
Answer: C. Cloud Budgets and Alerts
Explanation: Budgets can be assigned per project or label, allowing team-specific spending notifications.
To control which APIs can be used within a project, what should you configure?
API Gateway
B. Service Usage API
C. Organization Policy Service Constraints
D. IAM Conditions
Answer: C. Organization Policy Service Constraints
Explanation: These constraints can allow or deny specific APIs from being enabled in a project.
A developer needs to deploy a stateless HTTP API and scale to zero when idle. Best service?
App Engine Standard
B. Compute Engine
C. Cloud Run
D. GKE
Answer: C. Cloud Run
Explanation: Cloud Run is designed for stateless applications, scales to zero, and supports containerized deployments.
Which product is best suited for interactive SQL queries over large datasets?
Cloud SQL
B. Cloud Spanner
C. BigQuery
D. Firestore
Answer: C. BigQuery
Explanation: BigQuery is an analytics data warehouse built for fast SQL queries over petabyte-scale datasets.
What is the purpose of VPC Flow Logs?
Detecting DDoS attacks
B. Auditing IAM access
C. Capturing IP traffic to and from VM interfaces
D. Enforcing firewall rules
Answer: C. Capturing IP traffic to and from VM interfaces
Explanation: VPC Flow Logs provide network telemetry data for monitoring and security analysis.
Which GCP service is ideal for real-time messaging between decoupled services?
Cloud Tasks
B. Pub/Sub
C. Cloud Logging
D. Memorystore
Answer: B. Pub/Sub
Explanation: Pub/Sub is used for asynchronous, real-time messaging and decoupling components.
You need to create and test infrastructure changes safely. What should you use?
Gcloud CLI
B. Terraform
C. Cloud Console
D. IAM
Answer: B. Terraform
Explanation: Terraform supports infrastructure as code, allowing safe, repeatable infrastructure deployments.
Your security team requires access to logs for auditing. What role should they have?
Viewer
B. Logging Viewer
C. Editor
D. Security Admin
Answer: B. Logging Viewer
Explanation: This role grants read-only access to Cloud Logging logs without broader permissions.
What is the default behavior when a Compute Engine instance crashes?
Manual restart required
B. Auto-restart is enabled
C. Instance deleted
D. Migrated to another zone
Answer: B. Auto-restart is enabled
Explanation: By default, GCE instances auto-restart on failure unless the setting is disabled.
You need to run an Apache Spark job. What is the most suitable GCP service?
Dataprep
B. Dataflow
C. Dataproc
D. BigQuery ML
Answer: C. Dataproc
Explanation: Dataproc supports Hadoop, Spark, and Hive workloads on GCP.
Which GCP service allows multi-cluster and multi-cloud Kubernetes management?
GKE Standard
B. Kubernetes Engine Autopilot
C. Anthos
D. Cloud Run
Answer: C. Anthos
Explanation: Anthos enables hybrid and multi-cloud Kubernetes management across environments.
You want to deploy code from GitHub to Cloud Run on push. What tool should you use?
Cloud Functions
B. Cloud Build triggers
C. Cloud Deploy
D. Deployment Manager
Answer: B. Cloud Build triggers
Explanation: Cloud Build triggers automate builds and deployments based on Git events.
You need 99.999% availability for a global web app. What GCP combination is best?
GKE + Load Balancer
B. App Engine + Cloud SQL
C. Cloud Run + Cloud CDN
D. Global Load Balancer + GKE regional clusters
Answer: D. Global Load Balancer + GKE regional clusters
Explanation: This setup ensures global failover and high availability.
What is the primary function of Cloud Armor?
Cost optimization
B. Alerting
C. Threat detection
D. Web application firewall (WAF)
Answer: D. Web application firewall (WAF)
Explanation: Cloud Armor protects against web threats and supports IP-based and geo-based rules.
What service lets you track resource changes over time?
Cloud Monitoring
B. Cloud Audit Logs
C. Cloud Asset Inventory
D. Security Command Center
Answer: C. Cloud Asset Inventory
Explanation: It tracks and records the state of resources and their IAM bindings.
You want to restrict access to sensitive VMs. Which is most secure?
Tag-based firewall
B. VPC SC perimeter
C. Identity-Aware Proxy
D. Private Google Access
Answer: B. VPC SC perimeter
Explanation: VPC Service Controls create secure perimeters to protect sensitive data and resources.
What allows direct connection between on-prem and GCP over VPN?
Cloud Router
B. Cloud NAT
C. Cloud VPN
D. VPC Peering
Answer: C. Cloud VPN
Explanation: Cloud VPN creates IPsec tunnels between your network and GCP.
Which tool lets you troubleshoot IAM issues interactively?
IAM Roles Analyzer
B. IAM Policy Troubleshooter
C. Policy Validator
D. Security Health Analytics
Answer: B. IAM Policy Troubleshooter
Explanation: This tool helps identify why an identity does or does not have a specific permission.
What’s the best method to restrict access to BigQuery datasets?
IAM Conditions
B. Dataset ACLs
C. Cloud Storage Signed URLs
D. VPC Firewall
Answer: B. Dataset ACLs
Explanation: BigQuery dataset ACLs allow fine-grained access control.
A user wants to use SQL with serverless ETL. What service fits?
Dataflow
B. BigQuery
C. Dataproc
D. Dataform
Answer: D. Dataform
Explanation: Dataform offers a SQL-based interface for orchestrating data transformations in BigQuery.
Which command-line tool is used to manage GCP resources?
gsutil
B. kubectl
C. bq
D. gcloud
Answer: D. gcloud
Explanation: gcloud is the CLI tool for interacting with GCP services.
What provides the lowest latency data access in a GKE cluster?
Cloud Storage
B. Filestore
C. Cloud SQL
D. Memorystore
Answer: B. Filestore
Explanation: Filestore offers high-performance file storage suitable for workloads like GKE.
You need to create fine-grained identity permissions for workloads. What feature should you use?
Service Accounts
B. VPC SC
C. IAM Roles
D. Workload Identity Federation
Answer: D. Workload Identity Federation
Explanation: It allows external identities to impersonate service accounts securely without storing keys.
What feature enables building and managing CI/CD pipelines on GCP?
Cloud Build
B. Cloud Scheduler
C. Cloud Tasks
D. Dataflow
Answer: A. Cloud Build
Explanation: Cloud Build is GCP’s CI/CD service for building, testing, and deploying applications.
Reviews
There are no reviews yet.