Google Associate Cloud Engineer — Practice

测验题目

1. 1. You need to give a developer permission to deploy to a single GKE cluster without granting broad project access. Best practice?
   1. Grant Project Editor at the project level.
   2. Grant the Kubernetes Engine Developer role at the cluster level.
   3. Grant Owner of the organization.
   4. Share your personal credentials.
2. 2. Which gcloud command lists Compute Engine instances in the current project?
   1. gcloud compute instances list
   2. gcloud vm list
   3. gcloud instances show-all
   4. gcloud compute list-vms
3. 3. A workload runs fine on a single VM but needs zero-downtime deployments and autoscaling. Which platform is the simplest fit for a containerized app?
   1. Compute Engine with managed instance group
   2. Cloud Run
   3. Cloud Functions
   4. App Engine flexible environment
4. 4. Which resource limits API quota for a specific service in GCP?
   1. Project quotas (per-service, per-region)
   2. IAM roles
   3. Folder budgets
   4. Organization policies
5. 5. You want to ensure deleted Cloud Storage objects can be recovered for 30 days. What should you enable?
   1. Object versioning
   2. Object Lifecycle deletion
   3. Bucket lock
   4. Uniform bucket-level access
6. 6. Which load balancer is best for global HTTPS traffic distribution with URL maps?
   1. Global External HTTP(S) Load Balancer
   2. Internal TCP/UDP Load Balancer
   3. Regional Network Load Balancer
   4. Standard tier load balancer
7. 7. Which command authenticates the gcloud CLI as a user account?
   1. gcloud auth login
   2. gcloud config set account
   3. gcloud login --user
   4. gcloud init --auth
8. 8. Which feature controls which resources can be created in which regions across an organization?
   1. IAM custom roles
   2. Organization policies
   3. VPC firewall rules
   4. Folder labels
9. 9. Your batch job is fault-tolerant and can be restarted. Which compute pricing minimizes cost?
   1. On-demand VMs
   2. Spot VMs (formerly Preemptible)
   3. Committed Use Discount
   4. Sole-tenant nodes
10. 10. You need a private connection between an on-premises data center and a VPC with predictable bandwidth. What should you use?
    1. Cloud VPN
    2. Cloud Interconnect (Dedicated or Partner)
    3. Cloud NAT
    4. Shared VPC
11. 11. Which service centralizes logs across GCP resources and supports log-based alerting?
    1. Cloud Logging (formerly Stackdriver Logging)
    2. Cloud Trace
    3. Cloud Audit Logs only
    4. Cloud Profiler
12. 12. A team wants to deploy infrastructure declaratively using HCL or YAML. Which GCP-native service?
    1. Deployment Manager (or Config Connector / Terraform on GCP)
    2. Cloud Build
    3. Cloud Tasks
    4. Cloud Scheduler