QUESTION: 145

Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1standard2 nodes. You need to deploy additional pods requiring n2 highmem16 nodes without any downtime.
What should you do?

Use gcloud container clusters upgrade. Deploy the new services.
Create a new Node Pool and specify machine type n2highmem16. Deploy the new pods.
Create a new cluster with n2highmem16 nodes. Redeploy the pods and delete the old cluster.
Create a new cluster with both n1standard2 and n2highmem16 nodes. Redeploy the pods and delete the old cluster.

Answer(s): B

Explanation:

https://cloud.google.com/kubernetes-engine/docs/concepts/deployment

Reveal Solution Next Question

QUESTION: 146

You have an application that uses Cloud Spanner as a database backend to keep current state information about users. Cloud Bigtable logs all events triggered by users. You export Cloud Spanner data to Cloud Storage during daily backups. One of your analysts asks you to join data from Cloud Spanner and Cloud Bigtable for specific users. You want to complete this ad hoc request as efficiently as possible.
What should you do?

Create a dataflow job that copies data from Cloud Bigtable and Cloud Storage for specific users.
Create a dataflow job that copies data from Cloud Bigtable and Cloud Spanner for specific users.
Create a Cloud Dataproc cluster that runs a Spark job to extract data from Cloud Bigtable and Cloud Storage for specific users.
Create two separate BigQuery external tables on Cloud Storage and Cloud Bigtable. Use the BigQuery console to join these tables through user fields, and apply appropriate filters.

Answer(s): D

Explanation:

"The Cloud Spanner to Cloud Storage Text template is a batch pipeline that reads in data from a Cloud Spanner table, optionally transforms the data via a JavaScript User Defined Function (UDF) that you provide, and writes it to Cloud Storage as CSV text files."

https://cloud.google.com/dataflow/docs/guides/templates/provided-batch#cloudspannertogcstext

"The Dataflow connector for Cloud Spanner lets you read data from and write data to Cloud Spanner in a Dataflow pipeline"

https://cloud.google.com/spanner/docs/dataflow-connector https://cloud.google.com/bigquery/external-data-sources

Reveal Solution Next Question

QUESTION: 147

You are hosting an application from Compute Engine virtual machines (VMs) in uscentral1

You want to adjust your design to support the failure of a single Compute Engine zone, eliminate downtime, and minimize cost.
What should you do?
Create Compute Engine resources in uscentral1b.
Balance the load across both uscentral1a and uscentral1b.
Create a Managed Instance Group and specify uscentral1a as the zone.
Configure the Health Check with a short Health Interval.
Create an HTTP(S) Load Balancer.
Create one or more global forwarding rules to direct traffic to your VMs.
Perform regular backups of your application.
Create a Cloud Monitoring Alert and be notified if your application becomes unavailable.
Restore from backups when notified.

Answer(s): A

Explanation:

Choosing a region and zone You choose which region or zone hosts your resources, which controls where your data is stored and used. Choosing a region and zone is important for several reasons:

Handling failures

Distribute your resources across multiple zones and regions to tolerate outages. Google designs zones to be independent from each other: a zone usually has power, cooling, networking, and control planes that are isolated from other zones, and most single failure events will affect only a single zone. Thus, if a zone becomes unavailable, you can transfer traffic to another zone in the same region to keep your services running. Similarly, if a region experiences any disturbances, you should have backup services running in a different region. For more information about distributing your resources and designing a robust system, see Designing Robust Systems. Decreased network latency To decrease network latency, you might want to choose a region or zone that is close to your point of service. https://cloud.google.com/compute/docs/regions-zones#choosing_a_region_and_zone

Reveal Solution Next Question

QUESTION: 148

A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role.
What should you do?

In the console, validate which SSH keys have been stored as project-wide keys.
Navigate to Identity-Aware Proxy and check the permissions for these resources.
Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
Use the command gcloud projects getiampolicy to view the current role assignments.

Answer(s): D

Explanation:

A simple approach would be to use the command flags available when listing all the IAM policy for a given project. For instance, the following command: `gcloud projects get-iam-policy $PROJECT_ID -- flatten="bindings[].members" --format="table(bindings.members)" -- filter="bindings.role:roles/owner"` outputs all the users and service accounts associated with the role `roles/owner' in the project in question. https://groups.google.com/g/google-cloud- dev/c/Z6sZs7TvygQ?pli=1

Reveal Solution Next Question

Free Google Associate Cloud Engineer Exam Braindumps (page: 37)

QUESTION: 145

Explanation:

QUESTION: 146

Explanation:

QUESTION: 147

Explanation:

QUESTION: 148

Explanation: