Pre-exam quiz

JavaScript isn't enabled in your browser, so this file can't be opened. Enable and reload.

Pre-exam quiz

This is a quiz that resembles (types of questions, level of complexity etc) the one you'll go through the real PCA exam. Make sure to feel confident with this one before signing up for the exam.

My rule of thumb would be: if I'd get 80-90% of the answers right, I would feel quite comfortable with taking the real one. If not, I'd try to identify the grey areas and I would commit a bit of time to cover those before taking the exam.

Good luck!

Your web application has several VM instances running within a VPC. You want to restrict communications between instances to only the VMs and ports you authorize, but you don’t want to rely on static IP addresses or subnets because the app can autoscale. How should you restrict communications?

1 point

Use service accounts and configure the web application particular service accounts to have access.

Use Cloud DNS and only allow connections from authorized hostnames.

Use firewall rules based on service account or network tags attached to the compute instances

Use separate VPCs to restrict traffic

Clear selection

You have a Python web application with many dependencies that requires 0.1 CPU cores and 128 MB of memory to operate in production. You want to monitor and maximize machine utilization. You also want to reliably deploy new versions of the application. Which set of steps should you take?

1 point

1. Create a managed instance group with f1-micro type machines. 2. Use a startup script to clone the repository, check out the production branch, install the dependencies, and start the Python app. 3. Restart the instances to automatically deploy new production releases.

1. Create a managed instance group with n1-standard-1 type machines. 2. Build a Compute Engine image from the production branch that contains all of the dependencies and automatically starts the Python app. 3. Rebuild the Compute Engine image, and update the instance template to deploy new production releases.

1. Create a Kubernetes Engine cluster with n1-standard-1 type machines. 2. Build a Docker image from the production branch with all of the dependencies, and tag it with the version number. 3. Create a Kubernetes Deployment in the staging namespace, and then promote it to the production namespace after testing.

1. Create a Kubernetes Engine cluster with n1-standard-4 type machines. 2. Build a Docker image from the master branch will all of the dependencies, and tag it with "latest". 3. Create a Kubernetes Deployment in the default namespace with the imagePullPolicy set to "Always". Restart the pods to automatically deploy new production releases.

Clear selection

Your company is using BigQuery as its enterprise data warehouse. Data is distributed over several Google Cloud projects. All queries on BigQuery need to be billed on a single project. You want to make sure that no query costs are incurred on the projects that contain the data. Users should be able to query the datasets, but not edit them. How should you configure users’ access roles?

1 point

Add all users to a group. Grant the group the role of BigQuery user on the billing project and BigQuery user on the projects that contain the data.

Add all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project and BigQuery user on the projects that contain the data.

Add all users to a group. Grant the group the roles of BigQuery jobUser on the billing project and BigQuery dataViewer on the projects that contain the data.

Add all users to a group. Grant the group the roles of BigQuery dataViewer on the billing project and BigQuery jobUser on the projects that contain the data.

Clear selection

You have an application deployed on Kubernetes Engine using a Deployment named echo-deployment. The deployment is exposed using a Service called echoservice. You need to perform an update to the application with minimal downtime to the application. What should you do?

1 point

Use kubectl set image deployment/echo-deployment <new-image>

Use the rolling update functionality of the Instance Group behind the Kubernetes cluster

Update the deployment yaml file with the new container image. Use kubectl delete deployment/echo-deployment and kubectl create -f <yaml-file>

Update the service yaml file which the new container image. Use kubectl delete service/echo-service and kubectl create -f <yaml-file>

Clear selection

You have an application that will run on Compute Engine. You need to design an architecture that takes into account a disaster recovery plan that requires your application to fail over to another region in case of a regional outage. What should you do?

1 point

Deploy the application on two Compute Engine instances in the same project but in a different region. Use the first instance to serve traffic, and use the HTTP load balancing service to fail over to the standby instance in case of adisaster.

Deploy the application on a Compute Engine instance. Use the instance to serve traffic, and use the HTTP load balancing service to fail over to an instance on your premises in case of a disaster.

Deploy the application on two Compute Engine instance groups, each in the same project but in a different region. Use the first instance group to serve traffic, and use the HTTP load balancing service to fail over to the standby instancegroup in case of a disaster.

Deploy the application on two Compute Engine instance groups, each in separate project and a different region. Use the first instance group to server traffic, and use the HTTP load balancing service to fail over to the standby instance incase of a disaster.

Clear selection

You have found an error in your App Engine application caused by missing Cloud Datastore indexes. You have created a YAML file with the required indexes and want to deploy these new indexes to Cloud Datastore. What should you do?

1 point

Point gcloud datastore create-indexes to your configuration file

Upload the configuration file the App Engine’s default Cloud Storage bucket, and have App Engine detect the new indexes

In the GCP Console, use Datastore Admin to delete the current indexes and upload the new configuration file

Create an HTTP request to the built-in python module to send the index configuration file to your application

Clear selection

You are designing a large distributed application with 30 microservices. Each of your distributed microservices needs to connect to a database back-end. You want to store the credentials securely.Where should you store the credentials?

1 point

In the source code

In an environment variable

In a secret management system

In a config file that has restricted access through ACLs

Clear selection

Your company wants to try out the cloud with low risk. They want to archive approximately 100 TB of their log data to the cloud and test the analytics features available to them there, while also retaining that data as a long-term disaster recovery backup.Which two steps should you take? Choose 2 answers

2 points

Load logs into Google BigQuery

Load logs into Google Cloud SQL

Import logs into Google Cloud Monitoring

Insert logs into Google Cloud Bigtable

Upload log files into Google Cloud Storage

Your organization has a 3-tier web application deployed in the same network on Google Cloud Platform. Each tier (web, API, and database) scales independently of the others. Network traffic should flow through the web to the API tier and then on to the database tier. Traffic should not flow between the web and the database tier. How should you configure the network?

1 point

Add each tier to a different subnetwork in a separate regions

Set up software based firewalls on individual VMs

Add tags to each tier and set up routes to allow the desired traffic flow

Add tags to each tier and set up firewall rules to allow the desired traffic flow

Clear selection

A small number of API requests to your microservices-based application take a very long time. You know that each request to the API can traverse many services. You want to know which service takes the longest in those cases.What should you do?

1 point

Set timeouts on your application so that you can fail requests faster

Send custom metrics for each of your requests to Cloud Monitoring

Use Cloud Monitoring to look for insights that show when your API latencies are high

Instrument your application with Cloud Trace in order to break down the request latencies at each microservice

Clear selection

One of the developers on your team deployed their application in Google Container Engine with the Dockerfile below. They report that their application deployments are taking too long.You want to optimize this Dockerfile for faster deployment times without adversely affecting the app’s functionality.Which two actions should you take? Choose 2 answers.

2 points

Remove Python after running pip

Remove dependencies from requirements.txt

Use a slimmed-down base image like Alpine Linux

Use larger machine types for your Google Container Engine node pools

Copy the source after the package dependencies (Python and pip) are installed

You want to optimize the performance of an accurate, real-time, weather-charting application. The data comes from 50,000 sensors sending 10 readings a second, in the format of a timestamp and sensor reading. Where should you store the data?

1 point

Google Cloud Bigtable

Google BigQuery

Google Cloud SQL

Google Cloud Storage

Clear selection

You are creating a solution to remove backup files older than 90 days from your backup Cloud Storage bucket. You want to optimize ongoing Cloud Storage spend.What should you do?

1 point

Write a lifecycle management rule in XML and push it to the bucket with gsutil

Schedule a cron script using gsutil ls -lr gs://backups/** to find and remove items older than 90 days

Write a lifecycle management rule in JSON and push it to the bucket with gsutil

Schedule a cron script using gsutil ls -l gs://backups/** to find and remove items older than 90 days and schedule it with cron

Clear selection

Your customer is receiving reports that their recently updated Google App Engine application is taking approximately 30 seconds to load for some of their users.This behavior was not reported before the update.What strategy should you take?

1 point

Open a support ticket to ask for network capture and flow data to diagnose the problem, then roll back your application

Roll back to an earlier known good release initially, then use Cloud Trace and Logging to diagnose the problem in a development/test/staging environment

Roll back to an earlier known good release, then push the release again at a quieter period to investigate. Then use Cloud Trace and Logging to diagnose the problem

Work with your ISP to diagnose the problem

Clear selection

Your customer needs a system with a MongoDB and 2 replicas and wants maximum availability and protection against failures.

The database operates in US and is actively used 24/7, hence you cannot select a comfortable maintenance window.

What would be your advice?

1 point

use internal load balancing service with a managed instance group and regional Persistent Disks.

use a 3rd party MongoDB Managed Service such as MongoDB Atlas

Implement Live Migration and use regional PDs

use internal TCP/UDP Load Balancing with local SSDs.

Clear selection

You write a Python script to connect to Google BigQuery from a Google Compute Engine virtual machine. The script is printing errors that it cannot connect to BigQuery.What should you do to fix the script?

1 point

Update privileges of the service account that is used to run the VM

Install the latest BigQuery API client library for Python

Install the bq component for gcloud with the command gcloud components install bq.

Create a new service account with BigQuery access and execute your script with that user

Clear selection

You want to enable your running Google Kubernetes Engine cluster to scale as demand for your application changes.What should you do?

1 point

Add additional nodes to your Kubernetes Engine cluster using the following command:gcloud container clusters resize CLUSTER_Name – -size 10

Add a tag to the instances in the cluster with the following command:gcloud compute instances add-tags INSTANCE – -tags enableautoscaling max-nodes-10

Update the existing Kubernetes Engine cluster with the following command:gcloud container clusters update mycluster – -enableautoscaling- -min-nodes=1 – -max-nodes=10

Create a new Kubernetes Engine cluster with the following command: gcloud alpha container clusters create mycluster – -enableautoscaling- -min-nodes=1 – -max-nodes=10 and redeploy your application

Clear selection

Mountkirk Games wants to set up a continuous delivery pipeline. Their architecture includes many small services that they want to be able to update and roll back quickly. Mountkirk Games has the following requirements:

- Services are deployed redundantly across multiple regions in the US and Europe

- Only frontend services are exposed on the public internet

-They can provide a single frontend IP for their fleet of services

- Deployment artifacts are immutable

Which set of products should they use?

1 point

Google Cloud Storage, Google Cloud Dataflow, Google Compute Engine

Google Cloud Storage, Google App Engine, Google Network Load Balancer

Artifact Registry, Google Kubernetes Engine, Google HTTP(S) Load Balancer

Google Cloud Functions, Google Cloud Pub/Sub, Google Cloud Deployment Manager

Clear selection

Your agricultural division is experimenting with fully autonomous vehicles. You want your architecture to promote strong security during vehicle operation. Which two architectures should you consider? (Choose two.)

2 points

Treat every micro service call between modules on the vehicle as untrusted.

Require IPv6 for connectivity to ensure a secure address space.

Use a trusted platform module (TPM) and verify firmware and binaries on boot.

Use a functional programming language to isolate code execution cycles.

Use multiple connectivity subsystems for redundancy.

Enclose the vehicle’s drive electronics in a Faraday cage to isolate chips.

An AutonomousDrive company has equipped all cars with servers and sensors to collect telemetry data. Next year they want to use the data to train machine learning models. They want to store this data in the cloud while reducing costs.What should they do?

1 point

Have the vehicle’s computer compress the data in hourly snapshots, and store it in a Google Cloud Storage (GCS) Nearline bucket

Push the telemetry data in real-time to a streaming dataflow job that compresses the data, and store it in Google BigQuery

Push the telemetry data in real-time to a streaming dataflow job that compresses the data, and store it in Cloud Bigtable

Have the vehicle’s computer compress the data in hourly snapshots, and store it in a GCS Coldline bucket

Clear selection

Your company currently hosts an AWS S3 bucket. You need to keep the contents of this bucket in sync with a new GCS bucket. What is the recommended method to achieve it?

1 point

Use "gsutil cp" once per day to copy new files from AWS to GCP

Use "gsutil rsync" command to keep both locations in sync

Use Storage Transfer Service to sync the data.

Use "gsutil -m cp" to copy data in parallel every hour.

Clear selection

To be compliant with European GDPR regulation, EuroCar company is required to delete data generated from its European customers after a period of 36 months when it contains personal data. This data is stored in both Cloud Storage and BigQuery. What should you do?

1 point

Create a BigQuery table for the European data, and set the table retention period to 36 months. For Cloud Storage, use gsutil to enable lifecycle management using a DELETE action with an Age condition of 36 months.

Create a BigQuery table for the European data, and set the table retention period to 36 months. For Cloud Storage, use gsutil to create a SetStorageClass to NONE action when with an Age condition of 36 months.

Create a BigQuery time-partitioned table for the European data, and set the partition expiration period to 36 months. For Cloud Storage, use gsutil to enable lifecycle management using a DELETE action with an Age condition of 36months.

Create a BigQuery time-partitioned table for the European data, and set the partition period to 36 months. For Cloud Storage, use gsutil to create a SetStorageClass to NONE action with an Age condition of 36 months.

Clear selection

An organization has a separate folder for production projects. How to assure that logs from all production projects (existing and created in the future) will be collected and made available for Security team? Security team is not interested in viewing non-production logs.

1 point

Create Pub/Sub-based replication mechanism for logs generated in each of the existing / new projects to a central logging project.

Configure aggregated sink on folder level.

Configure logs aggregation on production projects level

Re-route logs to on-premises logging software

Clear selection

A company wants to create a policy that limits the possibility to create cloud resources to regions where it's physically present. How would you enforce such a policy?

1 point

By using custom Terraform validators for each resource creation.

By configuring IAM Conditions.

By configuring alert when such resources are created in disallowed region.

Bu configuring Organization policy blocking resource creation in certain regions.

Clear selection

Users have reported serious performance problems with an application running on several VMs grouped in MIG. Metrics state that on every machine single application process occupies 100% of computing power. Additionally MIG has already reached its upper limit of instances and cannot expand more. On the other hand no issues were detected in neighbouring components, especially there is no performance degradation of a database service used by this application. What would you recommend to quickly resolve the problem?

1 point

Plan staggered restart of VMs within this group

Increase upper limit of number of instances within given MIG

Change the MIG scaling metric to be based on memory usage instead of CPU usage

Clear selection

You are designing a relational data repository on GCP. The data will be transactionally consistent and added from any location in the world. You want to monitor and adjust processing capabilities based on traffic, which can spike unpredictably. What should you do?

1 point

Use Cloud Spanner. Monitor storage usage and increase node count when more than ~70% storage is utilized.

Use Cloud Spanner. Monitor CPU utilization and increase the node count if more than ~70% used for your time span.

Use Cloud Bigtable. Monitor data stored and increased node count if more than ~70% utilized.

Use Cloud Bigtable. Monitor CPU utilization and increase node count if more than ~70% utilized for your time span.

Clear selection

Development team is performing development tests of an application built in microservice architecture. In particular they want to test how the application behaves in case of unavailability of a single microservice that other services rely upon. How such a test may be performed?

1 point

Manually deleting proper cluster’s node

Using Istio - configure traffic management rules so that the given microservice is not called at all

Using Istio Fault Injection mechanism to simulate unavailability of given service

Use taints on chosen nodes / pods

Clear selection

The EHR Sales employees are a remote-based workforce that travels to different locations to do their job. Regardless of the location, they need to access web-based tools located in the EHR data center. EHR is retiring the current VPN infrastructure and needs to move the web-based sales tools to a BeyondCorp access model in GCP. Each sales employee has a Google Workspace account and uses that for SSO. What should you do?

1 point

Create an Identity-Aware Proxy (IAP) connector that points to the sales tool application.

Create a Google groups for the sales tool application, and upgrade that group to a security group.

Deploy and external HTTP(S) load balancer and create a custom Cloud Armor policy for the sales tool application.

Grant the predefined App Engine viewer role for every sales employee who needs access to the sales web tool.

Clear selection

Submit

Clear form

This form was created inside of Google.com. Privacy & Terms

Forms