โ† All Cloud Engineer Flashcard Decks

Associate Cloud Engineer v1.0 Flashcards

7 cards from real Cloud Engineer practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Associate Cloud Engineer v1.0 flashcards as text
  1. You are designing a solution requiring global HTTP(S) load balancing with SSL termination and Cloud CDN. Which load balancer type should you use?

    Answer: External Application Load Balancer (Global)

    The External Application Load Balancer in global mode supports HTTPS, SSL termination, and integrates with Cloud CDN at Google's edge.

  2. A BigQuery dataset is being queried by analysts in a different project. How should you grant them query access without exposing sensitive columns?

    Answer: Create a view without sensitive columns and grant access to the view

    An authorized view exposes only the columns you choose, providing fine-grained access control without sharing the underlying table.

  3. Your application writes logs to stdout inside a container running on GKE. Where do the logs appear by default?

    Answer: Cloud Logging (Logs Explorer)

    GKE automatically captures stdout/stderr from containers and routes them to Cloud Logging via the built-in logging agent.

  4. Which Terraform command shows you what changes will be applied without actually making them?

    Answer: terraform plan

    terraform plan generates an execution plan displaying what actions Terraform will take without modifying any infrastructure.

  5. You need to migrate a 10 TB on-premises MySQL database to Cloud SQL with minimal downtime. Which approach is most appropriate?

    Answer: Use Database Migration Service with continuous replication then cut over

    Database Migration Service supports continuous replication, allowing the on-premises database to stay live until you choose to cut over.

  6. A Cloud Storage bucket has Uniform Bucket-Level Access enabled. What does this mean?

    Answer: ACLs on individual objects are disabled; only IAM policies control access

    Uniform Bucket-Level Access disables object-level ACLs and enforces IAM-only access control across the entire bucket.

  7. You need a managed message queue that guarantees at-least-once delivery and supports multiple independent subscribers. Which service fits best?

    Answer: Cloud Pub/Sub

    Cloud Pub/Sub provides at-least-once delivery with fan-out to multiple subscriptions, each receiving all messages independently.