QUESTION: 17

What option does Cloud SQL offer to help with high availability?

Failover replicas
Snapshots
Point-in-time recovery
The AlwaysOn setting

Answer(s): A

Explanation:

When you create a Second Generation instance, you can configure it for high availability; Cloud SQL creates the failover replica at the same time that it creates the master.

Reference:

https://cloud.google.com/sql/docs/configure-ha#test

Reveal Solution Next Question

QUESTION: 18

Which of the follow methods will not cause a shutdown script to be executed?

An instances.delete API call
A preemptible instance being terminated
An instances.reset API call
An instances.stop API call

Answer(s): C

Explanation:

Shutdown scripts execute when an instance is scheduled to restart or terminate. There are many ways to restart or terminate an instance, but only some actions trigger the shutdown script to run. A shutdown script runs as part of the following actions:
-When an instance shuts down due to an instances.delete request or an instances.stoprequest to the API.
-When Compute Engine stops a pre-emptible instance as part of the preemption process.
-When an instance shuts down through a request to the guest operating system, such as sudo shutdown or sudo reboot.
-When you shut down an instance manually through the Cloud Platform Console or the gcloud compute tool. The shutdown script will not run if the instance is reset using instances().reset.

Reference:

https://cloud.google.com/compute/docs/shutdownscript

Reveal Solution Next Question

QUESTION: 19

Which of the following is not an IAM best practice?

Use primitive roles by default
Treat each component of your application as a separate trust boundary
Grant roles at the smallest scope needed
Restrict who has access to create and manage service accounts in your project

Answer(s): A

Explanation:

Treat each component of your application as a separate trust boundary. If you have multiple services that requires different permissions, create a separate service account for each of the services so that they can be permissioned differently.
Grant primitive roles in the following cases:
-When the Cloud Platform service does not provide a predefined role. See the predefined roles table for a list of all available predefined roles.
-When you want to grant broader permissions for a project. This often happens when you’re granting permissions in development or test environments.
-When you need to allow a member to modify permissions for a project, you’ll want to grant them the owner role because only owners have the permission to grant access to other users for projects.
-When you work in a small team where the team members don’t need granular permissions.
-Remember that a policy set on a child resource cannot restrict access granted on its parent. Check the policy granted on every resource and make sure you understand the hierarchical inheritance.
-Grant roles at the smallest scope needed. For example, if a user only needs access to publish Pub/Sub topic, grant the Publisher role to the user for that topic.
-Restrict who can act as service accounts. Users who are granted the Service Account Actor role for a service account can access all the resources for which the service account has access. Therefore be cautious when granting the Service Account Actor role to a user.
-Restrict who has access to create and manage service accounts in your project.
-Granting owner role to a member will allow them to modify the IAM policy. Therefore grant the owner role only if the member has a legitimate purpose to manage the IAM policy. This is because as your policy contains sensitive access control data and having a minimal set of users manage it will simplify any auditing that you may have to do.

Reveal Solution Next Question

QUESTION: 20

Which of the following is not helpful for mitigating the impact of an unexpected failure or reboot?

Use startup scripts to re-configure the system as needed
Back up your data
Use persistent disks
Configure tags and labels

Answer(s): D

Reveal Solution Next Question

Free GCP System Administrators Exam Braindumps (page: 5)

QUESTION: 17

Explanation:

Reference:

QUESTION: 18

Explanation:

Reference:

QUESTION: 19

Explanation:

QUESTION: 20