2.3 Configuring Compute Systems PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the purpose of a patch deployment in OS Config?

   • ATo update firewall rules
   • BTo create a new VM from a snapshot
   • CTo apply OS patches to a set of instances on a schedule
   • DTo assign IAM roles
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has a fleet of 200 Compute Engine VMs running a legacy application on CentOS 7. They need to apply critical security patches monthly, but the application cannot tolerate downtime during business hours. They want to automate patching and minimize manual effort. What should they do?

   • AUse OS Config to create a patch deployment that runs monthly during a maintenance window, and configure the VMs to reboot if needed.
   • BManually SSH into each VM and run yum update once a month.
   • CCreate a snapshot of each VM and restore it after patching.
   • DUse a startup script that runs yum update on every boot.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has a policy that all Compute Engine instances must have a label indicating the cost center and an environment tag. They also need to restrict which users can create instances with the 'prod' environment tag. What should they do?

   • AUse a custom role that includes compute.instances.create and assign it to all users.
   • BUse a Cloud Function that adds labels to instances when they are created.
   • CUse IAM conditions to grant the compute.instances.create permission only when the resource has the label 'environment=prod' for authorized users.
   • DUse a startup script to add labels after instance creation.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which resource configuration is used to control who can perform actions on a Compute Engine instance?

   • ALabels
   • BTags
   • CMetadata
   • DIAM policies
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A startup wants to manage its infrastructure as code using Terraform. They have a mix of Compute Engine instances, GKE clusters, and Cloud Run services. They want to ensure that all resources are tagged with the environment (e.g., dev, prod) and that changes are reviewed before applying. What is the best approach?

   • AUse a single Terraform configuration with modules for each service, and apply labels using a variable for environment. Use a CI/CD pipeline with plan and apply stages.
   • BUse separate Terraform configurations for each service and manually run terraform apply after each change.
   • CUse Deployment Manager templates for all resources and rely on its built-in versioning.
   • DCreate a Terraform configuration that uses a single resource block for all services and hardcode the environment label.
   Reveal Solution Discussion Select an answer first