Managing Implementation and Ensuring Solution and Operations Reliability →mediumMultiple SelectObjective-mapped
Google PCA Practice Question: Managing Implementation and Ensuring Solution and Operations Reliability
A company wants to back up their GKE cluster's etcd data and persistent volumes for disaster recovery. They are evaluating Velero. Which two components does Velero require to perform backups? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A Cloud Storage bucket for backup storage
Velero requires two core components: a storage destination (like a Cloud Storage bucket) to store backup artifacts, and a service account with appropriate IAM permissions to authenticate with the Google Cloud APIs and access cluster resources. A kubeconfig file is used for client-side kubectl operations, not as a component for Velero backups. Velero uses its own service account to communicate with the Kubernetes API server and trigger volume snapshots. Therefore, only option D is correct; option E is incorrect because Velero does not require a kubeconfig file.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A separate database such as Cloud SQL
Why it's wrong here
A separate database like Cloud SQL is not required. Velero stores backup metadata in the storage bucket, not in an external database.
- ✗
A Velero plugin for each persistent volume
Why it's wrong here
Velero plugins are optional and used for specific volume providers, but are not a core requirement for performing backups.
- ✗
A dedicated backup server with stateful storage
Why it's wrong here
A dedicated backup server is not needed; Velero runs as a deployment within the cluster itself.
- ✓
A Cloud Storage bucket for backup storage
Why this is correct
A Cloud Storage bucket is required as the durable storage destination for backup artifacts, including resource definitions and volume snapshots.
- ✗
Access to the cluster's kubeconfig file
Why it's wrong here
A kubeconfig file is not a component Velero requires; Velero uses a service account with IAM permissions to interact with the cluster and cloud APIs.
Go deeper
Related to this question
Learn chapter
Introduction to Google Cloud Platform
Key term
Service account
A service account is a special type of account used by an application or a virtual machine, rather than a human user, to authenticate and interact with cloud services and APIs securely.
Key term
Data
Data is raw, unprocessed information, like numbers, words, or measurements, that can be stored, processed, and analyzed by computers.
About these practice questions
Courseiva writes every PCA question from scratch — 955 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PCA practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PCA exam.