Associate Cloud Engineer v1.0 Flashcards
7 cards from real Cloud Engineer practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Associate Cloud Engineer v1.0 flashcards as text
You are setting up monitoring for a multi-project GCP environment and want a single pane of glass. What should you create?
Answer: A Cloud Monitoring scoping project that aggregates metrics from all member projects
A Cloud Monitoring scoping project allows you to view and alert on metrics from multiple GCP projects in a single workspace.
A Compute Engine VM is unresponsive and you cannot SSH into it. Which action lets you troubleshoot the VM's serial console output?
Answer: View the serial port output in the Cloud Console or via gcloud compute instances get-serial-port-output
The serial port output captures boot logs and kernel messages that are available even when SSH is not accessible.
Which Cloud Storage storage class should you use for data that is accessed less than once a year and must have the lowest storage cost?
Answer: Archive
Archive storage has the lowest per-GB cost and is designed for data accessed less than once a year, with higher retrieval costs.
You need to ensure that all new VM instances in your organization use only approved OS images. Which policy should you configure?
Answer: Organization policy constraint constraints/compute.trustedImageProjects
The trustedImageProjects organization policy constraint restricts VM creation to images from specified approved projects.
A developer accidentally deleted a Cloud Storage object. The bucket has versioning enabled. How do you restore the deleted object?
Answer: Copy the noncurrent version back to the live version using gsutil or gcloud storage
With versioning enabled, deleting an object creates a delete marker; you can restore it by copying the noncurrent version back as the live object.
Your application on Cloud Run needs to call a Cloud SQL instance. What is the recommended connection method?
Answer: Use the Cloud SQL Auth Proxy via a Unix socket sidecar or the built-in Cloud Run Cloud SQL connection
Cloud Run supports native Cloud SQL integration by specifying the instance connection name, which uses the Cloud SQL Auth Proxy internally for secure IAM-authenticated connections.
You want to export all audit logs from a GCP project to a centralized Cloud Storage bucket for long-term analysis. Which feature should you configure?
Answer: Log sink with a Cloud Storage destination
A Cloud Logging log sink routes logs matching a filter to a destination such as Cloud Storage, BigQuery, or Pub/Sub.