Preparing for Your

Associate Cloud Engineer

Journey

Course Workbook
Certification Exam Guide Sections
1 Setting up a cloud solution environment

2 Planning and configuring a cloud solution

3 Deploying and implementing a cloud solution

4 Ensuring successful operation of a cloud solution

5 Configuring access and security

Section 1:
Setting up a cloud solution
environment
1.1 Diagnostic Question 01

Stella is a new member of a team in your company who has A. Assign Stella a roles/compute.viewer role.
been put in charge of monitoring VM instances in the B. Assign Stella compute.instances.get permissions on all of
organization. Stella will need the required permissions to the projects she needs to monitor.
perform this role.
C. Add Stella to a Google Group in your organization. Bind
that group to roles/compute.viewer.
D. Assign the “viewer” policy to Stella.
How should you grant her those permissions?
1.1 Diagnostic Question 02

How are resource hierarchies organized A. Organization, Project, Resource, Folder.

in Google Cloud? B. Organization, Folder, Project, Resource.
C. Project, Organization, Folder, Resource.
D. Resource, Folder, Organization, Project.
1.1 Diagnostic Question 03

What Google Cloud project attributes A. The Project ID.

can be changed? B. The Project Name.
C. The Project Number.
D. The Project Category.
1.1 Diagnostic Question 04

Jane will manage objects in Cloud Storage for A. Assign Jane the roles/storage.objectCreator on every project.
the Cymbal Superstore. She needs to have access B. Assign Jane the roles/viewer on each project and the
to the proper permissions for every project across roles/storage.objectCreator for each bucket.
the organization.
C. Assign Jane the roles/editor at the organizational level.
D. Add Jane to a group that has the roles/storage.objectAdmin role
assigned at the organizational level.
What should you do?
1.1 Diagnostic Question 05

You need to add new groups of employees in A. Grant the most restrictive basic role to most services, grant predefined
Cymbal Superstore’s production environment. or custom roles as necessary.
You need to consider Google’s recommendation B. Grant predefined and custom roles that provide necessary permissions
of using least privilege. and grant basic roles only where needed.
C. Grant the least restrictive basic roles to most services and grant
predefined and custom roles only when necessary.
What should you do?
D. Grant custom roles to individual users and implement basic roles at the
resource level.
1.1 Diagnostic Question 06

The Operations Department at Cymbal A. compute.images.list

Superstore wants to provide managers access to B. compute.images.get
information about VM usage without allowing
C. compute.images.create
them to make changes that would affect the
state. You assign them the Compute Engine D. compute.images.setIAM
Viewer role. E. computer.images.update

Which two permissions will they receive?

 Setting up cloud projects
1.1 and accounts

Courses Skill Badges Documentation

Google Cloud Fundamentals: Overview | IAM Documentation
Core Infrastructure
Resource hierarchy | Resource Manager Documentati
● M2 Getting Starting with Google Cloud Google Cloud on
Google Cloud Create and Manage Perform Foundational Infrastructure
Cloud Resource Quest Tasks in Understanding roles | IAM Documentation
Google Cloud Quest
Architecting with Google Comp
ute Engine
● M4 IAM

=
Essential Google Cloud Infrastru
cture: Core Services
● M1 IAM
1.2 Diagnostic Question 07

How are billing accounts applied to projects A. Set up Cloud Billing to pay for usage costs in Google Cloud
in Google Cloud? (Pick two.) projects and Google Workspace accounts.
B. A project and its resources can be tied to more than one billing
account.
C. A billing account can be linked to one or more projects.
D. A project and its resources can only be tied to one billing
account.
E. If your project only uses free resources you don’t need a link
to an active billing account.
1.2 Diagnostic Question 08

Fiona is the billing administrator for the project A. Change the budget alert default threshold rules to include
associated with Cymbal Superstore’s Jeffrey as a recipient.
eCommerce application. Jeffrey, the marketing B. Use Cloud Monitoring notification channels to send Jeffrey an
department lead, wants to receive emails related email alert.
to budget alerts. Jeffrey should have access to
C. Add Jeffrey and Fiona to the budget scope custom email
no additional billing information.
delivery dialog.
D. Send alerts to a Pub/Sub topic that Jeffrey is subscribed to.
What should you do?
1.2 Managing billing configuration

Courses Documentation

Google Cloud Fundamentals: Core Infrastructure

● M2 Getting Starting with Google Cloud
Create, modify, or close your self-serv
e
Cloud Billing account
Architecting with Google Compu Essential Google Cloud
te Engine Infrastructure: Core Services Create, edit, or delete budgets and bud
get alerts | Cloud Billing
● M6 Resource Management = ● M3 Resource Management
1.3 Diagnostic Question 09

Pick two choices that provide a command line A. Google Cloud console
interface to Google Cloud. B. Cloud Shell
C. Cloud Mobile App
D. Cloud SDK
1.3 Diagnostic Question 10

You want to use the Cloud Shell to copy files to A. gcloud

your Cloud Storage bucket. B. gsutil
C. bq
Which Cloud SDK command should you use?
D. Cloud Storage Browser
 Installing and configuring the command line interface
1.3 (CLI), specifically the Cloud SDK

Courses Skill Badges Documentation

Google Cloud Fundamentals:
Core Infrastructure Google Cloud overview | Overview

● M2 Getting Starting with Google Cloud Google Cloud Managing Cloud SDK components | Cloud S
DK Documentation
Google Cloud Create and Manage Perform Foundational Infrastructure
Cloud Resource Quest Tasks in
Google Cloud Quest gcloud | Cloud SDK Documentation
Architecting with Google Comp
ute Engine Using the bq command-line tool | BigQuery
● M1 Getting Started gsutil tool | Cloud Storage
with Google Cloud

=
Essential Google Cloud Infrastru
cture: Core Services
● M1 Introduction to Google
Cloud
Section 2:
Planning and configuring a
cloud solution
2.1 Diagnostic Question 01

The projected amount of cloud storage A. Use the pricing calculator to estimate the
required for Cymbal Superstore to enable costs for 10 TB of regional Standard storage, 30 TB of
users to post pictures for project reviews is regional Coldline storage, and egress charges for
10 TB of immediate access storage in the reads from storage.
US and 30 TB of storage for historical posts B. Use the pricing calculator to estimate the price for 10 TB of regional Standard
in a bucket located near Cymbal storage, 30 TB of regional Nearline storage, and ingress charges for posts to
Superstore’s headquarters. The contents of the bucket.
this bucket will need to be accessed once
C. Use the pricing calculator to estimate the price for 10 TB of multi-region
every 30 days. You want to estimate the cost
Standard storage, 30 TB for regional Coldline storage, and ingress charges for
of these storage resources to ensure this is
posts to the bucket.
economically feasible.
D. Use the pricing calculator to estimate the price for 10 TB of multi-region
Standard storage, 30 TB for regional Nearline, and egress charges for reads
What should you do? from the bucket.
 Planning and estimating using
2.1 the Pricing Calculator

Courses Documentation

Google Cloud Pricing Calculator

Architecting with Google Compu Essential Google Cloud Infrastructure:
te Engine Foundation
● M3 Virtual Machines ● M3 Virtual Machines
● M6 Resource Management
= Essential Google Cloud Infrastructure:
Core Services
● M3 Resource Management
2.2 Diagnostic Question 02

Cymbal Superstore decides to migrate their A. Implement an application using containers on Cloud Run.
supply chain application to Google Cloud. You B. Implement an application using code on App Engine.
need to configure specific operating system
C. Implement an application using containers on Google Kubernetes
dependencies.
Engine.

What should you do? D. Implement an application using virtual machines on Compute
Engine.
2.2 Diagnostic Question 03

Cymbal Superstore decides to pilot a cloud A. SSH into a Compute Engine VM and execute your code.
application for their point of sale system in B. Package your code to a container image and post it to Cloud Run.
their flagship store. You want to focus on
C. Implement a deployment manifest and run kubectl apply on
code and develop your solution quickly, and
it in Google Kubernetes Engine.
you want your code to be portable.
D. Code your solution in Cloud Functions.

How do you proceed?

2.2 Diagnostic Question 04

An application running on a highly- A. Create Compute Engine Virtual Machines and

customized version of Ubuntu needs to be migrate the app to that infrastructure.
migrated to Google Cloud. You need to do B. Deploy the existing application to App Engine.
this in the least amount of time with
C. Deploy your application in a container image to Cloud Run.
minimal code changes.
D. Implement a Kubernetes cluster and create pods to
How should you proceed? enable your app.
2.2 Diagnostic Question 05

You want to deploy a microservices application. A. Cloud Run

You need full control of how you manage B. App Engine
containers, reliability, and autoscaling, but don’t
C. Google Kubernetes Engine
want or need to manage the control plane.
D. Compute Engine

Which compute option should you use?

 Planning and configuring
2.2 compute resources

Courses Skill Badges

Google Cloud Fundamentals: Core Inf Getting Started with Google Kubernetes E
rastructure ngine Google Cloud
Set Up and Configure a Cloud
● M3 Virtual Machines in the Cloud ● M2 Introduction to Containers and Environment in Google Clou
● M5 Containers in the Cloud d Quest
Kubernetes
● M6 Applications in the Cloud

Architecting with Google Compu Essential Google Cloud Infrastructure: Fo

te Engine undation Documentation
● M3 Virtual Machines
= ● M3 Virtual Machines
Choosing the right compute option in GCP: a
decision tree

Application Hosting Options

Tutorials | Compute Engine Documentation
2.3 Diagnostic Question 06

Cymbal Superstore needs to analyze whether they met A. BigQuery

quarterly sales projections. Analysts assigned to run B. Cloud SQL
this query are familiar with SQL.
C. Cloud Spanner
D. Cloud Firestore

What data solution should they implement?

2.3 Diagnostic Question 07

Cymbal Superstore’s supply chain application A. Archive

frequently analyzes large amounts of data to B. Coldline
inform business processes and operational
C. Nearline
dashboards.
D. Standard

What storage class would make

sense for this use case?
2.3 Diagnostic Question 08

Cymbal Superstore has a need to populate visual A. BigQuery

dashboards with historical time-based data. This is an B. Cloud Storage
analytical use-case.
C. Cloud Firestore
D. Cloud SQL
Which two storage solutions could they use?
E. Cloud Bigtable
 Planning and configuring data
2.3 storage options

Courses Skill Badges Documentation

Cloud Storage Options
Google Cloud Fundamentals: Co
re Infrastructure Storage classes
Google Cloud
● M4 Storage in the Cloud Perform Foundational Infrastructure Task Data lifecycle | Cloud Architecture Cent
s in er
Google Cloud Quest
Architecting with Google Compute En
gine
● M5 Storage and Database Services

=
Essential Google Cloud Infrastructure:
Core Services
● M2 Storage and
Database Services
2.4 Diagnostic Question 09

Cymbal Superstore is piloting an update to A. Implement a premium tier pass-through

its ecommerce app for the flagship store in external https load balancer connected to the
Minneapolis, Minnesota. The app is web tier as the frontend and a regional internal
implemented as a three-tier web service load balancer between the web tier and backend.
with traffic originating from the local area B. Implement a proxied external TCP/UDP network load balancer connected to
and resources dedicated for it in us- the web tier as the frontend and a premium network tier ssl load balancer
central1. You need to configure a secure, between the web tier and the backend.
low-cost network load-balancing
C. Configure a standard tier proxied external https load balancer connected to the
architecture for it.
web tier as a frontend and a regional internal load balancer between the web
tier and the backend.
D. Configure a proxied SSL load balancer connected to the web tier as the
How do you proceed? frontend and a standard tier internal TCP/UDP load balancer between the web
tier and the backend.
2.4 Diagnostic Question 10

What Google Cloud load balancing option runs at A. Global http(s)

Layer 7 of the TCP stack? B. Global SSL Proxy
C. Global TCP Proxy
D. Regional Network
 Planning and configuring
2.4 network resources

Courses Documentation

Google Cloud Fundamentals: Core Infrastructure

Cloud Load Balancing overview
● M3 Virtual Machines in the Cloud
Cloud Load Balancing

Architecting with Google Compu Essential Google Cloud Infrastructure:

te Engine Foundation
● M2 Virtual Networks ● M2 Virtual Network
● M9 Load Balancing Elastic Google Cloud Infrastructure: Sc
and Autoscaling = aling and Automation
● M2 Load Balancing
and Autoscaling
Section 3:
Deploying and implementing a
cloud solution
3.1 Diagnostic Question 01

Cymbal Superstore’s sales department has a A. Find a MySQL machine image in Cloud Marketplace and
medium-sized MySQL database. This database configure it to meet your needs.
includes user-defined functions and is used B. Implement a database instance using Cloud SQL, back up your
internally by the marketing department at local data, and restore it to the new instance.
Cymbal Superstore HQ. The sales department
C. Configure a Compute Engine VM with an N2 machine type,
asks you to migrate the database to Google
install MySQL, and restore your data to the new instance.
Cloud in the most timely and economical way.
D. Use gcloud to implement a Compute Engine instance with an E2-
standard-8 machine type, install, and configure MySQL.
What should you do?
3.1 Diagnostic Question 02

The backend of Cymbal Superstore’s e- A. Create a new instance template. Click Update VMs. Set the
commerce system consists of managed instance update type to Opportunistic. Click Start.
groups. You need to update the operating system B. Create a new instance template, then click Update VMs. Set the
of the instances in an automated way using update type to PROACTIVE. Click Start.
minimal resources.
C. Create a new instance template. Click Update VMs. Set max
surge to 5. Click Start.
D. Abandon each of the instances in the managed instance group.
What should you do? Delete the instance template, replace it with a new one, and
recreate the instances in the managed group.
 Deploying and implementing
3.1 Compute Engine resources

Courses Documentation

Google Cloud Fundamentals: Core Infrastructure

Compute Engine documentation | Comput
● M3 Virtual Machines in the Cloud e Engine Documentation
Creating managed instance groups | Comp
ute Engine Documentation
Architecting with Google Compu Essential Google Cloud Infrastructure:
te Engine Foundation
● M3 Virtual Machines ● M3 Virtual Machines
● M9 Load Balancing and Elastic Google Cloud Infrastructure: Sc
Autoscaling = aling and Automation
● M2 Load Balancing
● M10 Infrastructure
and Autoscaling
Automation
● M3 Infrastructure Automation
3.2 Diagnostic Question 03

The development team for the supply chain A. Implement an autopilot cluster in us-central1-a with a default pool
project is ready to start building their new and an Ubuntu image.
cloud app using a small Kubernetes cluster for B. Implement a private standard zonal cluster in us-central1-a with a
the pilot. The cluster should only be available default pool and an Ubuntu image.
to team members and does not need to be
C. Implement a private standard regional cluster in us-central1 with a
highly available. The developers also need the
default pool and container-optimized image type.
ability to change the cluster architecture as
they deploy new capabilities. D. Implement an autopilot cluster in us-central1 with an Ubuntu
image type.

How would you implement this?

 Deploying and Implementing
3.2 Google Kubernetes Engine resources

Courses Skill Badges Documentation

Types of clusters | Kubernetes Engine D
Google Cloud Fundamentals: Core Infrastruct ocumentation
ure Google Cloud

● M5 Containers in the Cloud Set Up and Configure a Clo

ud Environment in Google
Cloud Quest
Getting Started with Google Kubernetes Engi
ne
● M2 Introduction to Containers and
Kubernetes
● M3 Kubernetes Architecture
3.3 Diagnostic Question 04

You need to quickly deploy a containerized web A. App Engine flexible environment
application on Google Cloud. You know the B. App Engine standard environment
services you want to be exposed. You do not
C. Cloud Run
want to manage infrastructure. You only want to
pay when requests are being handled and need D. Cloud Functions
support for custom packages.

What technology meets these needs?

3.3 Diagnostic Question 05

You need to analyze and act on files being added A. --trigger-event google.storage.object.finalize
to a Cloud Storage bucket. Your programming B. --trigger-event google.storage.object.create
team is proficient in Python. The analysis you
C. --trigger-event google.storage.object.change
need to do takes at most 5 minutes. You
implement a Cloud Function to accomplish your D. --trigger-event google.storage.object.add
processing and specify a trigger resource
pointing to your bucket.

How should you configure the --trigger-event

parameter using gcloud?
 Deploying and implementing Cloud Run and
3.3 Cloud Functions resources

Courses Documentation

Google Cloud Fundamentals: Core Infrastructure

● M6 Applications in the Cloud
● M7 Developing, Deploying, and Monitoring in the Cloud Choose an App Engine environment |
App Engine Documentation

Application Hosting Options

Cloud Run: What no one tells you abo
ut Serverless (and how it's done)
Learn Cloud Functions in a snap!
Cloud Functions
3.4 Diagnostic Question 06

You require a Cloud Storage bucket serving A. Run a gcloud mb command specifying the name of the bucket and
users in New York City. There is a need for geo- accepting defaults for the other mb settings.
redundancy. You do not plan on using B. Run a gsutil mb command specifying a multi-regional location
ACLs. and an option to turn ACL evaluation off.
C. Run a gsutil mb command specifying a dual-region bucket and an
option to turn ACL evaluation off.
What CLI command do you use? D. Run a gsutil mb command specifying a dual-region bucket and
accepting defaults for the other mb settings.
3.4 Diagnostic Question 07

Cymbal Superstore asks you to implement Cloud SQL as a A. --availability-type

database backend to their supply chain application. You B. --replica-type
want to configure automatic failover in case of a zone
C. --secondary-zone
outage. You decide to use the gcloud sql instances create
command set to accomplish this. D. --master-instance-name

Which gcloud command line argument is required to

configure the stated failover capability as you create the
required instances?
3.4 Diagnostic Question 08

Cymbal Superstore’s marketing department A. Implement a bq load command in a command line script and
needs to load some slowly changing data into schedule it with cron.
BigQuery. The data arrives hourly in a Cloud B. Read the data from your bucket by using the BigQuery streaming
Storage bucket. You want to minimize cost and API in a program.
implement this in the fewest steps.
C. Create a Cloud Function to push data to BigQuery through a
Dataflow pipeline.
D. Use the BigQuery data transfer service to schedule a transfer
What should you do?
between your bucket and BigQuery.
 Deploying and implementing data
3.4 solutions

Courses Skill Badges Documentation

Google Cloud Fundamentals: Co Creating storage buckets | Cloud Storage
re Infrastructure
What is Cloud Storage?
● M4 Storage in the Cloud Google Cloud
Cloud SQL for MySQL features
● M8 Big Data and Machine Learning in Perform Foundational Infras
the Cloud tructure Tasks in Google Cl Creating instances | Cloud SQL for MyS
oud Quest QL

Architecting with Google Compute En How to load, import, or ingest data into
gine BigQuery for analysis

● M5 Storage and
Database Services Introduction to loading data | BigQuery
Google Cloud

= Set Up and Configure a Clo

ud Environment in Google
Essential Google Cloud Infrastructure: Cloud Quest
Core Services
● M2 Storage and
Database Services
3.5 Diagnostic Question 09

Which Virtual Private Cloud (VPC) network A. Default Project network

type allows you to fully control IP ranges and B. Auto mode network
the definition of regional subnets? C. Custom mode network
D. An auto mode network converted to a custom network
 Deploying and implementing
3.5 networking resources

Courses Skill Badges Documentation

Architecting with Google Compute En VPC network overview

gine Google Cloud

● M2 Virtual Networks Set Up and Configure a Clo

ud Environment in Google
Cloud Quest
=
Essential Google Cloud Infrastructure:
Foundation
● M2 Virtual Networks
3.5 Diagnostic Question 10

What action does the terraform A. Downloads the latest version of the terraform provider.
apply command perform? B. Verifies syntax of terraform config file.
C. Shows a preview of resources that will be created.
D. Sets up resources requested in the terraform config file.
 Implementing resources via
3.7 infrastructure as code

Courses Documentation

Architecting with Google Compu Elastic Google Cloud Infrastructure: Scali Introduction
te Engine ng and Automation Using Terraform with Google Cloud
● M10 Infrastructure
Automation
= ● M3 Infrastructure Automation
Section 4:
Ensuring successful operation
of a cloud solution
4.1 Diagnostic Question 01

A. gcloud compute snapshots list

You want to view a description of your
available snapshots using the command line B. gcloud snapshots list
interface (CLI). What gcloud command C. gcloud compute snapshots get
should you use?
D. gcloud compute list snapshots
4.1 Diagnostic Question 02

You have a scheduled snapshot you are A. Delete the downstream incremental snapshots before deleting the
trying to delete, but the operation returns main reference.
an error. B. Delete the object the snapshot was created from.

What should you do to resolve C. Detach the snapshot schedule before deleting it.
this problem? D. Restore the snapshot to a persistent disk before deleting it.
4.1 Diagnostic Question 03

A. Defining Health checks.

Which of the following tasks are part of the
process when configuring a managed B. Providing Number of instances.
instance group? (Pick two.) C. Specifying Persistent disks.
D. Choosing instance Machine type.
E. Configuring the operating system.
4.1 Managing Compute
Engine resources Documentation

Courses
Working with persistent disk snapshots |
Compute Engine Documentation
Google Cloud Fundamentals: Core Infrastructure
● M3 Virtual Machines in the Cloud
Working with persistent disk snapshots |
Compute Engine Documentation
Persistent disk snapshots | Compute Engin
Architecting with Google Compu Essential Google Cloud Infrastructure: e Documentation
te Engine Foundation
Instance templates | Compute Engine Doc
● M3 Virtual Machines ● M3 Virtual Machines umentation
● M9 Load Balancing
Elastic Google Cloud Infrastructure: Sc
and Autoscaling = aling and Automation Instance groups | Compute Engine Docum
● M2 Load Balancing entation
and Autoscaling
4.2 Diagnostic Question 04

Cymbal Superstore’s GKE cluster requires an internal A. Annotate your ingress object with an ingress.class of “gce.”
http(s) load balancer. You are B. Configure your service object with a type: LoadBalancer.
creating the configuration files required for
C. Annotate your service object with a neg reference.
this resource.
D. Implement custom static routes in your VPC.

What is the proper setting for this scenario?

4.2 Diagnostic Question 05

A. Pod templates
What Kubernetes object provides access to
logic running in your cluster via endpoints B. Pods
that you define? C. Services
D. Deployments
4.2 Diagnostic Question 06

A. kubectl apply
What is the declarative way to initialize and B. kubectl create
update Kubernetes objects?
C. kubectl replace
D. kubectl run
 Managing Google Kubernetes Documentation

4.2 Engine resources Ingress for Internal HTTP(S) Load Bala

ncing

Ingress for External HTTP(S) Load Bala

ncing

Courses Skill Badges Configuring Ingress for external load bal

ancing

Google Cloud Fundamentals: Core Infrastruct Configuring Ingress for Internal HTTP(S
ure ) Load Balancing
Google Cloud

Set Up and Configure a Clo GKE overview | Kubernetes Engine Doc

● M5 Containers in the Cloud umentation
ud Environment in Google
Cloud Quest
Getting Started with Google Kubernetes
Engine Pod | Kubernetes Engine Documentation
● M3 Kubernetes Architecture Deployment | Kubernetes Engine Docum
● M4 Introduction to Kubernetes entation
Workloads
Services | Kubernetes Engine Document
ation
Overview of deploying workloads | Kub
ernetes Engine Documentation
4.3 Diagnostic Question 07

You have a Cloud Run service with a A. Set Min instances.

database backend. You want to limit the B. Set Max instances.
number of connections to your
C. Set CPU Utilization.
database.
D. Set Concurrency settings.

What should you do?

4.3 Managing Cloud Run resources

Courses Documentation

Google Cloud Fundamentals: Core Infrastructure About container instance autoscaling |

Cloud Run Documentation
● M6 Applications in the Cloud
4.4 Diagnostic Question 08

You want to implement a lifecycle rule that A. Age

changes your storage type from standard to B. CreatedBefore
nearline after a specific date.
C. MatchesStorageClass
D. IsLive
What conditions should you use?
(Pick two.) E. NumberofNewerVersions
4.4 Managing storage and database solutions

Courses Documentation

Object Lifecycle Management | Cloud

Architecting with Google Compu Essential Google Cloud Infrastructure: Co Storage
te Engine re Services
● M5 Storage and Database
Services
= ● M2 Storage and
Database Services
4.5 Diagnostic Question 09

Cymbal Superstore has a subnetwork called A. gcloud compute networks subnets expand-ip-range mysubnet --
mysubnet with an IP range of 10.1.2.0/24. You region us-central1 --prefix-length 20
need to expand this subnet to include enough B. gcloud networks subnets expand-ip-range mysubnet --region us-
IP addresses for at most 2000 new users or central1 --prefix-length 21
devices.
C. gcloud compute networks subnets expand-ip-range mysubnet --
region us-central1 --prefix-length 21
D. gcloud compute networks subnets expand-ip-range mysubnet --
What should you do?
region us-cetnral1 --prefix-length 22
4.5 Managing networking resources

Courses Documentation

Architecting with Google Compu Essential Google Cloud Infrastructure: Fo gcloud compute networks subnets exp
te Engine undation and-ip-range
● M2 Virtual Networks
= ● M2 Virtual Networks
Using VPC networks
4.6 Diagnostic Question 10

Cymbal Superstore’s supply chain A. Choose resource type of VM instance and

management system has been deployed and metric of CPU load, condition trigger if any
is working well. You are tasked with time series violates, condition is below, threshold
monitoring the system’s resources so you is .60, for 5 minutes.
can react quickly to any problems. You want B. Choose resource type of VM instance and metric of CPU utilization,
to ensure the CPU usage of each of your condition trigger all time series violates, condition is above, threshold is .60
Compute Engine instances in us-central1 for 5 minutes.
remains below 60%. You want an incident
C. Choose resource type of VM instance, and metric of CPU utilization,
created if it exceeds this value for 5
condition trigger if any time series violates, condition is below, threshold
minutes. You need to configure the proper
is .60 for 5 minutes.
alerting policy for this scenario.
D. Choose resource type of VM instance and metric of CPU utilization,
condition trigger if any time series violates, condition is above, threshold
is .60 for 5 minutes.
What should you do?
4.6 Monitoring and logging

Courses Skill Badges Documentation

Managing metric-based alerting policies
Architecting with Google Compute En | Cloud Monitoring
gine Google Cloud

● M7 Resource Monitoring Perform Foundational Infras Introduction to alerting | Cloud Monitori

tructure Tasks in Google Cl ng
oud Quest
=
Essential Google Cloud Infrastructure:
Core Services
● M4 Resource Monitoring
Google Cloud

Set Up and Configure a Clo

ud Environment in Google
Cloud Quest
Section 5:
Configuring access and security
5.1 Diagnostic Question 01

You need to configure access to Cloud A. Assign permissions to a Google account referenced by the
Spanner from the GKE cluster that is application.
supporting Cymbal Superstore’s ecommerce B. Assign permissions through a Google Workspace account
microservices application. You want to referenced by the application.
specify an account type to set the proper
C. Assign permissions through service account referenced by
permissions.
the application.
D. Assign permissions through a Cloud Identity account
What should you do?
referenced by the application.
5.1 Diagnostic Question 02

You are trying to assign roles to the dev and prod A. Ask your administrator for
projects of Cymbal Superstore’s e-commerce app but resourcemanager.projects.setIamPolicy roles for each
are receiving an error when you try to run set-iam project.
policy. The projects are organized into an ecommerce B. Ask your administrator for the
folder in the Cymbal Superstore organizational roles/resourcemanager.folderIamAdmin for the ecommerce
hierarchy. You want to follow best practices for the folder.
permissions you need while respecting the practice of
C. Ask your administrator for the
least privilege.
roles/resourcemanager.organizationAdmin for Cymbal
Superstore.

What should you do? D. Ask your administrator for the roles/iam.securityAdmin role
in IAM.
5.1 Diagnostic Question 03

You have a custom role implemented for A. Make the change to the custom role locally and run
administration of the dev/test environment for an update on the custom role.
Cymbal Superstore’s transportation management B. Delete the custom role and recreate a new custom
application. You are developing a pilot to use Cloud role with required permissions.
Run instead of Cloud Functions. You want to ensure
C. Copy the existing role, add the new permissions to
your administrators have the correct access to the
the copy, and delete the old role.
new resources.
D. Create a new role with needed permissions and
migrate users to it.
What should you do?
 Managing Identity and
5.1 Access Management (IAM)

Courses Skill Badges Documentation

Google Cloud Fundamentals: Overview | Cloud IAM Documentation

Core Infrastructure
Preparing a Google Kubernetes Engine e
● M2 Getting Starting with nvironment for production
Google Cloud
Google Cloud

Architecting with Google Comp Set Up and Configure a Clo

ute Engine ud Environment in Google
● M4 Identity and Access Cloud Quest
Management (IAM)

=
Essential Google Cloud Infrastru
cture: Core Services
● M1 Identity and Access
Management (IAM)
5.2 Diagnostic Question 04

A. To directly access user data

Which of the scenarios below is an
example of a situation where you B. For development environments
should use a service account? C. For interactive analysis
D. For individual GKE pods
5.2 Diagnostic Question 05

Cymbal Superstore is implementing a mobile app for A. API key

end users to track deliveries that are en route to them.
B. OAuth 2.0 client
The app needs to access data about truck location
from Pub/Sub using Google recommended practices. C. Environment provided service account
D. Service account key

What kind of credentials should you use?

5.2 Managing service accounts

Courses Documentation

Google Cloud Fundamentals: Core Infrastructure

Authenticating as a service account | A
● M2 Getting Starting with Google Cloud uthentication
Authentication overview
Architecting with Google Compu Essential Google Cloud
te Engine Infrastructure: Core Services
● M4 Identity
and Access
= ● M1 Identity and Access
Management (IAM)
Management (IAM)
5.3 Diagnostic Question 06

A. Admin Activity audit logs

Which Cloud Audit log is disabled by
default with a few exceptions? B. Data Access audit logs
C. System Event audit logs
D. Policy Denied audit logs
5.3 Diagnostic Question 07

You are configuring audit logging for Cloud A. Admin Activity log entries
Storage. You want to know when objects are
B. ADMIN_READ log entries
added to a bucket.
C. DATA_READ log entries

Which type of audit log entry should D. DATA_WRITE log entries

you monitor?
5.3 Viewing audit logs

Courses Documentation

Google Cloud Fundamentals: Core Infrastructure

Cloud Audit Logs overview | Cloud
● M7 Deployment and Monitoring Logging
Cloud Audit Logs with Cloud Storag
e
Architecting with Google Compu Essential Google Cloud
te Engine Infrastructure: Core Services
● M7 Resource
Monitoring
= ● M4 Resource Monitoring
 When will you take the exam?

How many weeks do you have to

Plan time prepare?

to prepare How many hours will you spend

preparing for the exam each week?

How many total hours will you prepare?

Example 6-week plan

Week 1 Week 2 Week 3 Week 4 Week 5 Week 6

Google Cloud Create and Manage Architecting with Set up and configure Getting started with Sample questions
Fundamentals: Core Cloud Resources Compute Engine a cloud environment GKE
Infrastructure Skill Badge Skill Badge
Automating Review
Foundational Infrastructure on documentation
Infrastructure Google Cloud with
Skill Badge Terraform
Skill Badge
Weekly study plan
Now, consider what you’ve learned about your knowledge and skills through
the diagnostic questions in this course. You should have a better
understanding of what areas you need to focus on and what resources are
available.

Use the template that follows to plan your study goals for each week.
Consider:
● What exam guide section(s) or topic area(s) will you focus on?
● What courses (or specific modules) will help you learn more?
● What Skill Badges or labs will you work on for hands-on practice?
● What documentation links will you review?
● What additional resources will you use - such as sample questions?
You may do some or all of these study activities each week.

Duplicate the weekly template for the number of weeks in your individual
preparation journey.
Weekly study template (example)
Area(s) of focus: Configuring access using IAM

Courses/modules Google Cloud Fundamentals: Core Infrastructure, Module 2 Getting Started with Google Cloud
to complete: Architecting with Google Compute Engine, Module 4 IAM

Skill Badges/labs Set Up and Configure a Cloud Environment in Google Cloud Quest
to complete:

Documentation https://cloud.google.com/iam/docs/overview
https://cloud.google.com/architecture/prep-kubernetes-engine-for-prod#managing_identity_and_access
to review: https://cloud.google.com/iam/docs/creating-custom-roles
https://cloud.google.com/docs/authentication/production#automatically
https://cloud.google.com/docs/authentication/

Additional study: Sample questions 1-5

Weekly study template
Area(s) of focus:

Courses/modules
to complete:

Skill Badges/labs
to complete:

Documentation
to review:

Additional study: