โ† All Cloud Engineer Flashcard Decks

Associate Cloud Engineer v1.0 Flashcards

7 cards from real Cloud Engineer practice questions. Tap to flip, then mark Knew It or Still Learning โ€” missed cards come back until you master them.

Read the first 7 Associate Cloud Engineer v1.0 flashcards as text
  1. Your GKE pods are being evicted frequently because nodes run out of memory. What should you configure to prevent this?

    Answer: Set resource requests and limits in pod specs

    Setting memory requests and limits ensures the scheduler places pods on nodes with sufficient capacity and prevents individual pods from consuming all memory.

  2. You need to store application secrets like API keys and database passwords securely and access them from Cloud Run. What is the recommended approach?

    Answer: Store secrets in Secret Manager and mount them as environment variables or volumes in Cloud Run

    Secret Manager is GCP's dedicated secrets store and Cloud Run natively integrates with it via environment variable or volume mounts.

  3. Which metric should you monitor to detect that a Cloud SQL instance is becoming a bottleneck due to connection exhaustion?

    Answer: database/postgresql/num_backends

    num_backends tracks the number of active database connections, and exhaustion of the connection limit causes new connections to be refused.

  4. A Cloud Run service receives a burst of 10,000 requests per second. What happens if you have not set a maximum instance limit?

    Answer: Cloud Run scales out to as many instances as needed to handle the requests

    Without a maximum instance limit, Cloud Run scales out horizontally to handle demand, subject to project quota limits.

  5. You need to create a custom VPC with specific subnets and firewall rules using Infrastructure as Code. Which tool is natively supported by Google Cloud?

    Answer: Cloud Deployment Manager

    Cloud Deployment Manager is Google Cloud's native IaC service using YAML/Jinja2/Python templates, though Terraform is also widely used.

  6. You need to expose a GKE service to the internet with a stable external IP address. Which Kubernetes service type should you use?

    Answer: LoadBalancer

    A LoadBalancer service type provisions a Google Cloud external load balancer with a stable external IP for internet-facing traffic.

  7. Your Cloud Storage bucket contains objects that must be retained for 7 years for compliance. Which feature enforces this?

    Answer: Retention policy with a 7-year retention period

    A retention policy prevents objects from being deleted or overwritten until the specified retention period has elapsed.