Cloud Engineer Associate Cloud Engineer v1.0 4

Question 1

Your GKE pods are being evicted frequently because nodes run out of memory. What should you configure to prevent this?

Accepted Answer

Set resource requests and limits in pod specs

Answer

Setting memory requests and limits ensures the scheduler places pods on nodes with sufficient capacity and prevents individual pods from consuming all memory.

Question 2

You need to store application secrets like API keys and database passwords securely and access them from Cloud Run. What is the recommended approach?

Accepted Answer

Store secrets in Secret Manager and mount them as environment variables or volumes in Cloud Run

Answer

Secret Manager is GCP's dedicated secrets store and Cloud Run natively integrates with it via environment variable or volume mounts.

Question 3

Which metric should you monitor to detect that a Cloud SQL instance is becoming a bottleneck due to connection exhaustion?

Accepted Answer

database/postgresql/num_backends

Answer

num_backends tracks the number of active database connections, and exhaustion of the connection limit causes new connections to be refused.

Question 4

A Cloud Run service receives a burst of 10,000 requests per second. What happens if you have not set a maximum instance limit?

Accepted Answer

Cloud Run scales out to as many instances as needed to handle the requests

Answer

Without a maximum instance limit, Cloud Run scales out horizontally to handle demand, subject to project quota limits.

Question 5

You need to create a custom VPC with specific subnets and firewall rules using Infrastructure as Code. Which tool is natively supported by Google Cloud?

Accepted Answer

Cloud Deployment Manager

Answer

Cloud Deployment Manager is Google Cloud's native IaC service using YAML/Jinja2/Python templates, though Terraform is also widely used.

Cloud Engineer Practice Test

Cloud Engineer Practice Test

Cloud Engineer Associate Cloud Engineer v1.0 4