2.4 Planning and Implementing Resources Using Tooling ASSOCIATE-CLOUD-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company has a Terraform configuration that manages resources in a GCP project. A team member accidentally deleted a Cloud Storage bucket that is tracked in the Terraform state. The team wants to restore the bucket and its contents. They have not made any changes to the Terraform configuration. What is the most efficient way to recover?

   • AUse `gcloud storage cp` to copy the bucket from a snapshot.
   • BRun `terraform import` on the deleted bucket to bring it back under management.
   • CManually recreate the bucket in the console and then run `terraform refresh`.
   • DRun `terraform plan` and then `terraform apply` to recreate the bucket, and restore the contents from backups or versioning.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An organization uses Terraform to provision a GKE cluster and Helm to deploy applications. They need to ensure that when the GKE cluster is recreated (e.g., after a disaster), the Helm releases are automatically reinstalled. They use a remote backend for Terraform state. What is the best approach?

   • AUse Config Connector to manage the Helm releases.
   • BCreate a startup script in the GKE cluster that runs `helm install` on boot.
   • CStore the Helm charts in a Git repository and manually run `helm install` after cluster recreation.
   • DUse a Terraform `helm_release` resource to manage the Helm releases, so they are recreated when the cluster is recreated.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   How does Config Connector enable declarative management of GCP resources?

   • ABy storing GCP resource configurations in a ConfigMap that is read by GKE.
   • BBy allowing users to define GCP resources as Kubernetes custom resources and applying them with kubectl.
   • CBy providing a REST API that translates Kubernetes objects into GCP API calls.
   • DBy generating Terraform configuration files from Kubernetes manifests.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A team manages a Terraform configuration that creates a Cloud SQL instance. They need to change the database version from MySQL 5.7 to MySQL 8.0. They are concerned about downtime and data loss. What is the best approach?

   • AUse `gcloud sql instances patch` to change the version, then update the Terraform state with `terraform import`.
   • BUse the Gemini CLI to generate a new configuration and apply it.
   • CUpdate the `database_version` argument in the Terraform configuration and run `terraform apply`, then verify the upgrade.
   • DDelete the instance in Terraform and recreate it with the new version, then restore from backups.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A team uses Config Connector to manage GCP resources from a GKE cluster. They need to grant a service account in the cluster the ability to create and manage Pub/Sub topics. They have already installed Config Connector. What is the correct way to grant the necessary permissions?

   • AUse a Helm chart to grant the permissions.
   • BUse `kubectl create serviceaccount` and then bind it to the `pubsub.editor` role in GCP.
   • CCreate a Kubernetes Role and RoleBinding in the cluster that grants permissions to create `PubSubTopic` resources.
   • DCreate an IAM policy binding in GCP that grants the Config Connector service account the `roles/pubsub.editor` role.
   Reveal Solution Discussion Select an answer first