السؤال #1

A. Google group

B. Service account

C. Code account

D. Google account

49. Which of the following is not an IAM best practice?

عرض الإجابة

اجابة صحيحة: B

السؤال #2

A. Create a snapshot of the disk and use it to create a new disk; then attach the new disk to a new instance

B. Use netcat to try to connect to port 22

C. Access the serial console output

D. Create a startup script to collect information

66. To configure Stackdriver to monitor a web server and let you know if it goes down, what steps do you need to take? (Select 2 answers

عرض الإجابة

اجابة صحيحة: B

السؤال #3

A. They’re the same, only the branding is different

B. Each subnetwork controls the IP address range used for instances that are allocated to that subnetwork

C. With subnetworks IP address allocation occurs at the global network level

D. Legacy networks are the preferred way to create networks

43. Which of the following is not a valid metric for triggering autoscaling?

عرض الإجابة

اجابة صحيحة: B

السؤال #4

A. Block SYN floods using Cloud Router

B. Isolate your internal traffic from the external world

C. Scale to absorb the attack

D. Reduce the attack surface for your GCE deployment

52. Which is the fastest instance storage option that will still be available when an instance is stopped?

عرض الإجابة

اجابة صحيحة: D

السؤال #5

A. When an instance shuts down through a request to the guest operating system

B. A preemptible instance being terminated

C. An instances

D. Shutting down via the cloud console

48. Which type of account would you use in code when you want to interact with Google Cloud services?

عرض الإجابة

اجابة صحيحة: A

السؤال #6

A. Service accounts

B. Tags

C. Metadata

D. Labels

45. What option does Cloud SQL offer to help with high availability?

عرض الإجابة

اجابة صحيحة: A

السؤال #7

A. Cloud Bigtable and Cloud SQL

B. Cloud Spanner and Cloud SQL

C. Cloud SQL and Cloud Datastore

D. Cloud SQL

55. Which statement about IP addresses is false?

عرض الإجابة

اجابة صحيحة: B

السؤال #8

A. 2 Cloud VPN Gateways and 1 Peer Gateway

B. 1 Cloud VPN Gateway, 1 Peer Gateway, and 1 Cloud Router

C. 2 Peer Gateways and 1 Cloud Router

D. 2 Cloud VPN Gateways and 1 Cloud Router

60. Which of the following statements about encryption on GCP is not true?

عرض الإجابة

اجابة صحيحة: B

السؤال #9

A. Google Cloud Pub/Sub queuing

B. Average CPU utilization

C. Stackdriver Monitoring metrics

D. App Engine Task Queues

44. Which of the following features makes applying firewall settings easier?

عرض الإجابة

اجابة صحيحة: A

السؤال #10

A. Google Cloud Platform encrypts customer data stored at rest by default.

B. Each encryption key is itself encrypted with a set of master keys

C. If you want to manage your own encryption keys for data on Google Cloud Storage, the only option is Customer-Managed Encryption Keys (CMEK) using Cloud KMS

D. Data in Google Cloud Platform is broken into subfile chunks for storage, and each chunk is encrypted at the storage level with an individual encryption key

61. Which database service requires that you configure a failover replica to make it highly available?

عرض الإجابة

اجابة صحيحة: B

السؤال #11

A. Use primitive roles by default

B. Treat each component of your application as a separate trust boundary

C. Grant roles at the smallest scope needed

D. Restrict who has access to create and manage service accounts in your project

50. Which of the following would not reduce your recovery time in the event of a disaster?

عرض الإجابة

اجابة صحيحة: D

السؤال #12

A. Install the Stackdriver Logging Agent on the web server

B. Create an alerting policy

C. Install the Stackdriver Monitoring Agent on the web server

D. Create an uptime check

67. Which of these tools can you use to copy data from AWS S3 to Cloud Storage? (Select 2 answers

عرض الإجابة

اجابة صحيحة: C

السؤال #13

A. You can migrate your existing Microsoft application licenses to Compute Engine instances, but not your Microsoft Windows licenses.

B. You can migrate your existing Microsoft Windows and Microsoft application licenses to Compute Engine instances

C. You cannot migrate your existing Microsoft Windows or Microsoft application licenses to Compute Engine instances

D. You can migrate your existing Microsoft Windows licenses to Compute Engine instances, but not your Microsoft application licenses

54. Which database services support standard SQL queries?

عرض الإجابة

اجابة صحيحة: C

السؤال #14

A. Firewall rules and subnetworks

B. Networks and subnetworks

C. Subnetworks and projects

D. Projects and networks

65. Suppose you have a web server that is working properly, but you can’t connect to its instance VM over SSH

عرض الإجابة

اجابة صحيحة: B

السؤال #15

A. Increase the CPU and memory on the instance by changing the machine type.

B. Validate that your disk has a valid file system

C. Examine your virtual machine instance’s serial port output

D. Connect to your virtual machine instance using SSH

69. Which statements about application load testing are true? (Select 2 answers

عرض الإجابة

اجابة صحيحة: C

السؤال #16

A. A managed instance group combines existing instances of different configurations into one manageable group

B. A managed instance group uses an instance template to create identical instances

C. A managed instance group creates a firewall around instances

D. A managed instance group is a set of servers used exclusively for batch processing

41. What type of firewall rule(s) does Google Cloud’s networking support?

عرض الإجابة

اجابة صحيحة: B

السؤال #17

A. Use the gcloud and/or gsutil commands.

B. Request an OAuth2 access token and use it directly

C. Embed the service account’s credentials in the application’s source code

D. Use one of the Google Cloud Client Libraries

64. What are two different features that fully isolate groups of VM instances?

عرض الإجابة

اجابة صحيحة: D

السؤال #18

A. You should test at the maximum load that you expect to encounter.

B. You should test at 50% more than the maximum load that you expect to encounter

C. It is not necessary to test sudden increases in traffic since GCP scales seamlessly

D. Your load tests should include testing sudden increases in traffic

70. Which of these statements about resilience testing are true? (Select 2 answers

عرض الإجابة

اجابة صحيحة: C

السؤال #19

A. Make it as easy as possible to adjust the DNS record to cut over to your warm standby server.

B. Replace your warm standby server with a hot standby server

C. Use a highly preconfigured machine image for deploying new instances

D. Replace your active/active hybrid production environment (on-premises and GCP) with a warm standby server

51. Which of the following is not a best practice for mitigating Denial of Service attacks on your Google Cloud infrastructure?

عرض الإجابة

اجابة صحيحة: B

السؤال #20

A. deny

B. allow, deny & filtered

C. allow

D. allow & deny

42. How are subnetworks different than the legacy networks?

عرض الإجابة

اجابة صحيحة: D

السؤال #21

A. Cloud Storage Transfer Service

B. S3 Storage Transfer Service

C. Cloud Storage Console

D. gsutil

68. What are two of the actions you can take to troubleshoot a virtual machine instance that won’t start up at all? (Select 2 answers

عرض الإجابة

اجابة صحيحة: B

السؤال #22

A. ubuntu

B. The Google provided “gceinstance” user

C. Whatever user you specify in the console

D. root

47. Which of the follow methods will not cause a shutdown script to be executed?

عرض الإجابة

اجابة صحيحة: B

السؤال #23

A. Point-in-time recovery

B. The AlwaysOn setting

C. Snapshots

D. Failover replicas

46. Regarding Compute Engine: when executing a startup script on a Linux server which user does the instance execute the script as?

عرض الإجابة

اجابة صحيحة: A

السؤال #24

A. Don’t select the “Multizone” option when creating your managed instance group.

B. Spread your managed instance group over two zones and overprovision by 100%

C. Create a regional unmanaged instance group and spread your instances across multiple zones

D. Overprovision your regional managed instance group by at least 50%

58. If you do not grant a user named Bob permission to access a Cloud Storage bucket, but then use an ACL to grant access to an object inside that bucket to Bob, what will happen?

عرض الإجابة

اجابة صحيحة: A

السؤال #25

A. Bob will be able to access all of the objects inside the bucket because he was granted access to at least one object in the bucket.

B. Bob will be able to access the object because bucket and object ACLs are independent of each other

C. Bob will not be able to access the object because he does not have access to the bucket

D. It is not possible to grant access to an object when it is inside a bucket for which a user does not have access

59. To set up a virtual private network between your office network and Google Cloud Platform and have the routes automatically updated when the network topology changes, what is the minimal number of each type of component you need to implement?

عرض الإجابة

اجابة صحيحة: C

السؤال #26

A. Whenever possible, assign roles to groups instead of to individuals.

B. Grant users the appropriate permissions to facilitate least privilege

C. Whenever possible, assign primitive roles rather than predefined roles

D. Audit all policy changes by checking the Cloud Audit Logs

63. Which of these is not a recommended method of authenticating an application with a Google Cloud service?

عرض الإجابة

اجابة صحيحة: C

السؤال #27

A. You are charged for a static external IP address for every hour it is in use.

B. You are not charged for ephemeral IP addresses

C. Google Cloud Engine supports only IPv4 addresses, not IPv6

D. You are charged for a static external IP address when it is assigned but unused

56. Which Google Cloud Platform service requires the least management because it takes care of the underlying infrastructure for you?

عرض الإجابة

اجابة صحيحة: A

السؤال #28

A. Container Engine

B. Cloud Engine

C. App Engine

D. Docker containers running on Cloud Engine

57. To ensure that your application will handle the load even if an entire zone fails, what should you do?

عرض الإجابة

اجابة صحيحة: D

السؤال #29

A. Local SSD

B. Standard Persistent Disk

C. SSD Persistent Disk

D. RAM disk

53. Which of these statements about Microsoft licenses is true?

عرض الإجابة

اجابة صحيحة: D

السؤال #30

A. Cloud Spanner

B. Cloud SQL

C. BigQuery

D. Cloud Datastore

62. Which of these is not a principle you should apply when setting roles and permissions?

عرض الإجابة

اجابة صحيحة: A

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان