Cloud Engineer Associate Cloud Engineer v1.0 5 — Questions and Answers
Question 1: You are setting up monitoring for a multi-project GCP environment and want a single pane of glass. What should you create?
- A Cloud Monitoring scoping project that aggregates metrics from all member projects (Correct answer)
- One Cloud Monitoring workspace per project
- A BigQuery dataset to export all metrics and query them
- A Stackdriver group with all projects added
Correct answer: A Cloud Monitoring scoping project that aggregates metrics from all member projects
A Cloud Monitoring scoping project allows you to view and alert on metrics from multiple GCP projects in a single workspace.
Question 2: A Compute Engine VM is unresponsive and you cannot SSH into it. Which action lets you troubleshoot the VM's serial console output?
- View the serial port output in the Cloud Console or via gcloud compute instances get-serial-port-output (Correct answer)
- Reboot the instance and try SSH again
- Attach a new boot disk and mount it on another VM
- Take a snapshot and restore to a new VM
Correct answer: View the serial port output in the Cloud Console or via gcloud compute instances get-serial-port-output
The serial port output captures boot logs and kernel messages that are available even when SSH is not accessible.
Question 3: Which Cloud Storage storage class should you use for data that is accessed less than once a year and must have the lowest storage cost?
- Archive (Correct answer)
- Coldline
- Nearline
- Standard
Correct answer: Archive
Archive storage has the lowest per-GB cost and is designed for data accessed less than once a year, with higher retrieval costs.
Question 4: You need to ensure that all new VM instances in your organization use only approved OS images. Which policy should you configure?
- Organization policy constraint constraints/compute.trustedImageProjects (Correct answer)
- IAM deny policy on Compute Engine
- Firewall rule restricting image sources
- VPC Service Controls perimeter
Correct answer: Organization policy constraint constraints/compute.trustedImageProjects
The trustedImageProjects organization policy constraint restricts VM creation to images from specified approved projects.
Question 5: A developer accidentally deleted a Cloud Storage object. The bucket has versioning enabled. How do you restore the deleted object?
- Copy the noncurrent version back to the live version using gsutil or gcloud storage (Correct answer)
- Restore from the most recent Cloud Storage transfer job
- Contact GCP Support to recover the object
- Re-upload the object from the original source
Correct answer: Copy the noncurrent version back to the live version using gsutil or gcloud storage
With versioning enabled, deleting an object creates a delete marker; you can restore it by copying the noncurrent version back as the live object.
Question 6: Your application on Cloud Run needs to call a Cloud SQL instance. What is the recommended connection method?
- Use the Cloud SQL Auth Proxy via a Unix socket sidecar or the built-in Cloud Run Cloud SQL connection (Correct answer)
- Connect directly using the Cloud SQL public IP address
- Use a VPN tunnel from Cloud Run to Cloud SQL
- Whitelist the Cloud Run outbound IP in Cloud SQL authorized networks
Correct answer: Use the Cloud SQL Auth Proxy via a Unix socket sidecar or the built-in Cloud Run Cloud SQL connection
Cloud Run supports native Cloud SQL integration by specifying the instance connection name, which uses the Cloud SQL Auth Proxy internally for secure IAM-authenticated connections.
Question 7: You want to export all audit logs from a GCP project to a centralized Cloud Storage bucket for long-term analysis. Which feature should you configure?
- Log sink with a Cloud Storage destination (Correct answer)
- Cloud Monitoring metric export
- Pub/Sub push subscription
- Cloud Trace export
Correct answer: Log sink with a Cloud Storage destination
A Cloud Logging log sink routes logs matching a filter to a destination such as Cloud Storage, BigQuery, or Pub/Sub.
Cloud Engineer Associate Cloud Engineer v1.0 5
You are setting up monitoring for a multi-project GCP environment and want a single pane of glass.
What should you create?