Google Associate-Cloud-Engineer Value Pack (Frequently Bought Together)

You have deployed an application on a Compute Engine instance. An external consultant needs to access the Linux-based instance. The consultant is connected to your corporate network through a VPN connection, but the consultant has no Google account. What should you do?

• A. Instruct the external consultant to generate an SSH key pair, and request the public key from the consultant. Add the public key to the instance yourself, and have the consultant access the instance through SSH with their private key.
• B. Instruct the external consultant to use the gcloud compute ssh command line tool by using the public IP address of the instance to access it.
• C. Instruct the external consultant to use the gcloud compute ssh command line tool by using Identity-Aware Proxy to access the instance.
• D. Instruct the external consultant to generate an SSH key pair, and request the private key from the consultant. Add the private key to the instance yourself, and have the consultant access the instance through SSH with their public key.

You have deployed an application on a single Compute Engine instance. The application writes logs to disk. Users start reporting errors with the application. You want to diagnose the problem.
What should you do?

• A. Install and configure the Ops agent and view the logs from Cloud Logging.
• B. Connect to the instance's serial console and read the application logs.
• C. Configure a health check on the instance and set a Consecutive successes?Healthy threshold value of 1.
• D. Navigate to Cloud Logging and view the application logs.

You manage an App Engine Service that aggregates and visualizes data from BigQuery. The application is deployed with the default App Engine Service account. The data that needs to be visualized resides in a different project managed by another team. You do not have access to this project, but you want your application to be able to read data from the BigQuery dataset. What should you do?

• A. Ask the other team to grant your default App Engine Service account the role of BigQuery Data Viewer.
• B. In Cloud IAM of your project, grant a newly created service account from the other team the role of BigQuery Job User in your project.
• C. In Cloud IAM of your project, ensure that the default App Engine service account has the role of BigQuery Data Viewer.
• D. Ask the other team to grant your default App Engine Service account the role of BigQuery Job User.

Your organization needs to grant users access to query datasets in BigQuery but prevent them from accidentally deleting the datasets. You want a solution that follows Google-recommended practices. What should you do?

• A. Create a custom role by removing delete permissions. Add users to the group, and then add the group to the custom role.
• B. Add users to roles/bigquery user role only, instead of roles/bigquery dataOwner.
• C. Add users to roles/bigquery dataEditor role only, instead of roles/bigquery dataOwner.
• D. Create a custom role by removing delete permissions, and add users to that role only.

You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?

• A. Cloud Firestore
• B. Cloud SQL
• C. Cloud Datastore
• D. Cloud Spanner