Google PCA Managing Implementation and Ensuring Solution and Operations Reliability Practice Test 5 — 15 Questions

Question 1

A company is designing a DR strategy for their GKE workloads. They need to back up application data and cluster configuration. Which THREE resources should they include in their backup plan? (Choose THREE.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

etcd snapshot via Velero. PersistentVolume data (application data), Kubernetes resource manifests (deployments, services), and etcd snapshots (cluster state) are essential. Node images can be recreated from configuration. Service accounts are IAM entities and not typically backed up as part of cluster backup.

Answer

Service account keys for the cluster

Answer

Compute Engine node images

Question 2

A company has a Cloud SQL for PostgreSQL instance in a single zone. To achieve high availability, they want to ensure automatic failover with zero data loss and minimal downtime. Which configuration should they use?

Accepted Answer

Configure a Cloud SQL regional instance with a failover replica in a different zone. Cloud SQL HA requires a regional instance with a failover replica in a different zone within the same region. This provides automatic failover and synchronous replication to ensure zero data loss. Read replicas are for read scaling, not automatic failover. Cross-region replication does not provide automatic failover.

Answer

Deploy a read replica in the same zone and enable automatic failover

Answer

Enable automatic backups and point-in-time recovery

Answer

Add a cross-region read replica and configure failover manually

Question 3

An organization needs to connect their on-premises network to Google Cloud with a 99.99% SLA and up to 10 Gbps throughput. They have a supported partner for network connectivity. Which solution meets these requirements?

Accepted Answer

HA VPN with two Cloud VPN gateways and four tunnels. HA VPN offers a 99.99% SLA and supports up to 10 Gbps throughput. It requires two VPN gateways and four tunnels for redundancy. Dedicated Interconnect offers 10-100 Gbps but a 99.99% SLA only with two connections. Partner Interconnect provides up to 10 Gbps but the SLA depends on the partner. The question specifies up to 10 Gbps and a partner, but HA VPN is the only one with a built-in 99.99% SLA for a single connection. However, the 'supported partner' clue suggests Partner Interconnect, but its SLA is not 99.99% guaranteed by Google. The correct answer is HA VPN because it explicitly offers 99.99% SLA and can handle up to 10 Gbps.

Answer

Partner Interconnect with multiple VLAN attachments

Answer

Dedicated Interconnect with a single 10 Gbps connection

Answer

Classic VPN with a single tunnel

Question 4

A company runs a microservices application on GKE Autopilot. They want to implement canary deployments where a new version of a service receives 10% of traffic. Which approach should they use?

Accepted Answer

Use a Kubernetes Service with label selectors pointing to two Deployments (stable and canary) and scale the number of replicas to achieve 10% traffic. GKE Autopilot supports canary deployments using Kubernetes native features like multiple Deployments with a Service selector using a common label, and adjusting replica counts to control traffic. Istio or Traffic Director are not required. Cloud Deploy can be used but the simplest approach is to use a single Kubernetes Service with label selectors pointing to both Deployments and scaling replicas.

Answer

Use Istio VirtualService to split traffic between two subsets of the same Service

Answer

Deploy the canary version using a separate Service with a different DNS name and configure the application to split traffic

Answer

Use Cloud Deploy with a rollout strategy that sets traffic percentage to 10% for the canary

Question 5

A company uses Cloud Logging to capture application logs. They need to alert when the number of errors exceeds 100 in a 5-minute window. Which type of alert should they create?

Accepted Answer

Log-based metric with an alerting policy. Log-based metrics allow you to count log entries matching a filter. You can then create a metric and an alerting policy based on that metric. The other options are not suitable: SLO alerts monitor service level objectives, notification channels are destinations, and sinks export logs.

Answer

Notification channel with email integration

Answer

Cloud Logging sink to a Pub/Sub topic

Answer

SLO alerting policy

Question 6

A company is planning a migration from on-premises to Google Cloud. They want to ensure minimal downtime and the ability to roll back quickly if issues arise. Which deployment strategy should they use?

Accepted Answer

Phased migration. Phased migration involves moving workloads in stages, allowing testing and rollback at each phase. This minimizes risk and downtime. Blue/green and canary are more suited for application updates, not infrastructure migration. A big bang migration is high risk.

Answer

Blue/green deployment

Answer

Big bang migration

Answer

Canary deployment

Question 7

A company uses Cloud Spanner in a multi-region configuration. They want to ensure the highest availability with an SLA of 99.999%. Which configuration supports this?

Accepted Answer

Multi-region configuration with three regions. Cloud Spanner multi-region configurations are designed for 99.999% availability. The default multi-region setups (e.g., nam3, eur3) include three regions with automatic failover. A single-region configuration offers 99.99%. Multi-region with two regions does not provide the same SLA.

Answer

Single-region configuration

Answer

Dual-region configuration with read replicas

Answer

Multi-region configuration with two regions

Question 8

An engineer needs to list all Compute Engine instances in a project using the command line. Which gcloud command should they use?

Accepted Answer

gcloud compute instances list. The correct command to list Compute Engine instances is 'gcloud compute instances list'. The other options are incorrect: 'gcloud compute machine-types list' lists machine types, 'gcloud compute instance-groups list' lists instance groups, and 'gcloud compute instances describe' describes a specific instance.

Answer

gcloud compute instances describe

Answer

gcloud compute instance-groups list

Answer

gcloud compute machine-types list

Question 9

A company runs a critical application on GKE with etcd for configuration storage. They want to back up etcd data for disaster recovery. Which tool should they use?

Accepted Answer

Velero. Velero (formerly Heptio Ark) is an open-source tool for backing up and restoring Kubernetes resources, including etcd snapshots. gcloud container clusters describe does not back up, Backup for GKE is a managed service but not specifically for etcd, and etcdctl is a command-line tool for etcd but is not typically used for automated backups in GKE.

Answer

gcloud container clusters describe

Answer

Backup for GKE

Answer

etcdctl

Question 10

A company wants to test the performance of a new web application under high load. They need a tool that can generate traffic from multiple regions. Which Google Cloud service should they use?

Accepted Answer

Cloud Load Testing. Cloud Load Testing (formerly Cloud Load Balancing) is a managed service that can generate load from multiple regions. Locust is an open-source tool that can be deployed on Compute Engine but is not a managed GCP service. Cloud Shell is a development environment. Cloud Run is for running containers.

Answer

Cloud Run

Answer

Cloud Shell

Answer

Locust

Question 11

An organization uses Cloud Storage to store critical documents. They want to protect against accidental deletion or overwriting of objects. Which feature should they enable?

Accepted Answer

Object versioning and retention policies. Object versioning and retention policies together protect against accidental deletion and overwrites. Versioning keeps multiple versions of objects, and retention policies prevent deletion until a specified time. Uniform bucket-level access is for access control, not protection. Object lifecycle management automates transitions/deletion, not protection. Encryption protects data at rest.

Answer

Uniform bucket-level access

Answer

Object lifecycle management rules

Answer

Customer-managed encryption keys (CMEK)

Question 12

A company has a Cloud SQL for MySQL instance with automated backups enabled. They need to recover the database to a specific point in time within the last hour. Which feature should they use?

Accepted Answer

Point-in-time recovery (PITR). Point-in-time recovery (PITR) restores a Cloud SQL instance to a specific time, using binary logs. Automated backups alone restore to the backup time, not arbitrary points. Failover replica is for high availability. Import is for loading data from a file.

Answer

Failover replica

Answer

Automated backup restore

Answer

Import using the mysqldump file

Question 13

A company has two on-premises data centers connected to Google Cloud via two Dedicated Interconnect connections (each 10 Gbps) from different providers. They want to achieve the highest availability for connectivity. Which configuration should they use?

Accepted Answer

Configure two VLAN attachments on each Interconnect with separate BGP sessions. For highest availability, use two separate VLAN attachments on each Interconnect connection, with BGP sessions on each. This provides redundancy at multiple levels. Using a single VLAN attachment or single Interconnect reduces availability. Cloud Router with active/passive is less optimal than active/active.

Answer

Configure one VLAN attachment per Interconnect and use BGP with active/passive

Answer

Use a single VLAN attachment and rely on the second Interconnect as a backup

Answer

Configure each Interconnect with a single VLAN attachment and use Cloud Router with active/active BGP

Question 14

A company wants to set up monitoring and alerting for their application running on GKE. They need to receive alerts via email and also trigger an automated remediation workflow. Which TWO components should they use? (Choose two.)

Accepted Answer

Notification channels (email). Alerting policies define conditions and notifications. Notification channels (email) send alerts. Pub/Sub can trigger Cloud Functions for remediation. Logging is for logs, not alerting. Cloud Shell is a terminal.

Answer

Cloud Shell

Answer

Cloud Logging

Answer

Pub/Sub

Question 15

A company is designing a disaster recovery plan for their Cloud SQL for PostgreSQL database. They need to ensure that they can recover from a regional outage with minimal data loss. Which TWO strategies should they implement? (Choose two.)

Accepted Answer

Create a cross-region read replica. Cross-region replication (using a read replica in another region) and automated backups with PITR provide regional DR. A failover replica in the same region does not protect against region failure. On-premises backup is not mentioned. Import/export is for migration, not DR.

Answer

Export the database daily to Cloud Storage

Answer

Configure a failover replica in the same region

Answer

Use a Cloud SQL for PostgreSQL on-premises backup