Cloud Engineer Cloud Engineer: Google Associate 3 — Questions and Answers
Question 1: You need to run a batch job that processes data for 2 hours and can tolerate interruption. Which Compute Engine option minimizes cost?
- On-demand VM with standard pricing
- Committed use discount instance
- Spot VM (preemptible) (Correct answer)
- Sole-tenant node
Correct answer: Spot VM (preemptible)
Spot VMs (preemptible instances) offer up to 91% discount over on-demand pricing and are ideal for fault-tolerant batch workloads.
Question 2: A developer needs read-only access to BigQuery datasets in a project but should not be able to create or delete any resources. Which predefined role is most appropriate?
- roles/bigquery.admin
- roles/bigquery.dataViewer (Correct answer)
- roles/bigquery.user
- roles/viewer
Correct answer: roles/bigquery.dataViewer
roles/bigquery.dataViewer grants read access to datasets and tables without allowing resource creation or deletion.
Question 3: You want to monitor CPU utilization of all Compute Engine VMs and receive an alert if any instance exceeds 80% for 5 minutes. What should you create in Cloud Monitoring?
- A log-based metric
- An uptime check
- An alerting policy with a threshold condition (Correct answer)
- A custom dashboard only
Correct answer: An alerting policy with a threshold condition
An alerting policy with a metric threshold condition on compute.googleapis.com/instance/cpu/utilization triggers notifications when the condition is met.
Question 4: Which GKE feature automatically adjusts the number of nodes in a cluster based on current workload resource requests?
- Horizontal Pod Autoscaler
- Vertical Pod Autoscaler
- Cluster Autoscaler (Correct answer)
- Node auto-provisioning
Correct answer: Cluster Autoscaler
Cluster Autoscaler adds or removes nodes from a node pool based on pending pod resource requests and current utilization.
Question 5: Your application stores session data in Cloud Memorystore for Redis. After a Redis instance restart, all session data is lost. What should you enable to persist data across restarts?
- Read replicas
- RDB snapshots or AOF persistence (Correct answer)
- VPC peering
- High availability (HA) mode only
Correct answer: RDB snapshots or AOF persistence
Enabling RDB persistence or AOF logging in Memorystore for Redis allows data to survive instance restarts.
Question 6: You need to transfer 500 TB of on-premises data to Google Cloud Storage within 10 days. The available internet bandwidth is 50 Mbps. Which transfer method is most appropriate?
- gsutil parallel uploads
- Storage Transfer Service from on-premises
- Transfer Appliance (physical device) (Correct answer)
- Cloud VPN with Direct Peering
Correct answer: Transfer Appliance (physical device)
At 50 Mbps, transferring 500 TB over the internet would take months; Transfer Appliance ships a physical device to move data offline.
Question 7: Which Cloud IAM feature allows you to grant temporary access to a resource that expires after a specified time without modifying permanent IAM policies?
- IAM conditions with a date/time attribute (Correct answer)
- Service account impersonation
- IAM deny policies
- Workload Identity Federation
Correct answer: IAM conditions with a date/time attribute
IAM conditions can restrict bindings to specific time windows using the `request.time` attribute, effectively creating time-limited access.
Cloud Engineer Cloud Engineer: Google Associate 3
You need to run a batch job that processes data for 2 hours and can tolerate interruption.
Which Compute Engine option minimizes cost?