Cloud Engineer Cloud Engineer: Google Associate 5

Question 1

You need to route traffic between two VPC networks in different GCP projects without traversing the public internet. What is the recommended solution?

Accepted Answer

Set up VPC Network Peering between the two networks

Answer

VPC Network Peering connects two VPC networks privately so traffic flows through Google's internal network without public internet exposure.

Question 2

A Dataflow pipeline reading from Cloud Storage is running slowly. The job graph shows one stage with significantly more work than others. What is the likely cause?

Accepted Answer

Data skew causing a hot key in one worker bundle

Answer

Data skew causes one worker to receive a disproportionate share of data, creating a bottleneck visible as an unbalanced stage in the job graph.

Question 3

Which Cloud Logging export destination allows you to run SQL queries on log data for long-term analysis?

Accepted Answer

BigQuery dataset

Answer

Exporting logs to BigQuery via a log sink enables SQL-based analysis on structured log data for historical trends and compliance.

Question 4

You are setting up a Cloud Armor security policy. Which rule action blocks requests that match a condition?

Accepted Answer

deny(403)

Answer

The deny(403) action in Cloud Armor returns an HTTP 403 Forbidden response to requests matching the security policy rule.

Question 5

A Cloud SQL for PostgreSQL instance is running out of storage. What feature can automatically increase storage capacity without downtime?

Accepted Answer

Automatic storage increase

Answer

Cloud SQL's automatic storage increase feature detects when free space is low and automatically adds storage without requiring manual intervention or downtime.

Cloud Engineer Practice Test

Cloud Engineer Practice Test

Cloud Engineer Cloud Engineer: Google Associate 5