2.3 Configuring Compute Systems PROFESSIONAL-CLOUD-ARCHITECT Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   Which Kubernetes resource is used to deploy a containerized application to a GKE cluster?

   • AService
   • BPersistentVolume
   • CConfigMap
   • DDeployment
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which serverless service is best suited for executing a small piece of code in response to a Cloud Storage event?

   • ACloud Run
   • BCompute Engine
   • CCloud Functions
   • DGKE
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   A Compute Engine VM needs to access a Cloud Storage bucket without using a public IP address. Which feature enables this private connectivity?

   • APrivate Google Access
   • BFirewall rule
   • CVPC peering
   • DCloud NAT
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company has a mix of Windows and Linux VMs in Compute Engine. They need to apply security patches monthly, but they have a compliance requirement that all patches must be approved by the security team before deployment. They also need to track which patches have been applied. What should they do?

   • AUse OS Config patch deployments and configure the patch deployment to use a maintenance window and include a pre-patch step that requires approval.
   • BUse a startup script on each VM that runs patch updates and logs the results to Cloud Logging.
   • CUse a combination of Cloud Scheduler, Cloud Functions, and OS Config to implement an approval workflow: Cloud Scheduler triggers a Cloud Function that sends a notification to the security team, and the security team approves by invoking another Cloud Function that runs the patch deployment.
   • DUse OS Config patch deployments and rely on the patch deployment's ability to schedule and track patches, but manually approve each patch before running.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company has a Cloud Run service that needs to be invoked by a Cloud Scheduler job every hour. The service requires authentication. What should they do?

   • ACreate a service account for the Cloud Scheduler job and grant it the Cloud Run Invoker role on the service.
   • BUse a Cloud Function to invoke the Cloud Run service.
   • CUse a custom domain and configure basic authentication.
   • DMake the Cloud Run service publicly accessible and use an API key.
   Reveal Solution Discussion Select an answer first