Associate Cloud Engineer v1.0 Flashcards
7 cards from real Cloud Engineer practice questions. Tap to flip, then mark Knew It or Still Learning โ missed cards come back until you master them.
Read the first 7 Associate Cloud Engineer v1.0 flashcards as text
You are designing a solution requiring global HTTP(S) load balancing with SSL termination and Cloud CDN. Which load balancer type should you use?
Answer: External Application Load Balancer (Global)
The External Application Load Balancer in global mode supports HTTPS, SSL termination, and integrates with Cloud CDN at Google's edge.
A BigQuery dataset is being queried by analysts in a different project. How should you grant them query access without exposing sensitive columns?
Answer: Create a view without sensitive columns and grant access to the view
An authorized view exposes only the columns you choose, providing fine-grained access control without sharing the underlying table.
Your application writes logs to stdout inside a container running on GKE. Where do the logs appear by default?
Answer: Cloud Logging (Logs Explorer)
GKE automatically captures stdout/stderr from containers and routes them to Cloud Logging via the built-in logging agent.
Which Terraform command shows you what changes will be applied without actually making them?
Answer: terraform plan
terraform plan generates an execution plan displaying what actions Terraform will take without modifying any infrastructure.
You need to migrate a 10 TB on-premises MySQL database to Cloud SQL with minimal downtime. Which approach is most appropriate?
Answer: Use Database Migration Service with continuous replication then cut over
Database Migration Service supports continuous replication, allowing the on-premises database to stay live until you choose to cut over.
A Cloud Storage bucket has Uniform Bucket-Level Access enabled. What does this mean?
Answer: ACLs on individual objects are disabled; only IAM policies control access
Uniform Bucket-Level Access disables object-level ACLs and enforces IAM-only access control across the entire bucket.
You need a managed message queue that guarantees at-least-once delivery and supports multiple independent subscribers. Which service fits best?
Answer: Cloud Pub/Sub
Cloud Pub/Sub provides at-least-once delivery with fan-out to multiple subscriptions, each receiving all messages independently.