75 of 100 questions · Page 1/2 · Ensuring Successful Operation of a Cloud Solution · Answers revealed
You want to create a log-based metric to count errors from your application logs. Which TWO resources are required? (Select 2)
Required to identify which logs count.
Why this answer
You need a filter to match error logs and a metric descriptor that defines the metric type.
You have updated a deployment in GKE, but the new pods are crashing. You want to revert to the previous working version. What should you do?
This rolls back the deployment to the previous revision.
Why this answer
kubectl rollout undo reverts to the previous revision.
You need to update a deployment in your GKE cluster from image version 1.0 to 2.0. You have already updated the manifest file. Which THREE kubectl commands should you use in sequence? (Choose three in the correct order.)
This command updates the deployment's container image to version 2.0, triggering a rolling update.
Why this answer
To update a deployment in GKE after modifying the manifest file, a standard sequence is: first, apply the new image using `kubectl set image` (option B), which triggers a rollout. Then, monitor the rollout progress with `kubectl rollout status` (option E) to ensure it completes. Finally, verify the new revision using `kubectl rollout history` (option D).
Options A and C are not part of this update sequence: A lists pods, and C is for rollback only.
You are using Cloud Run and want to split traffic so that 10% of requests go to revision v2 and 90% go to revision v1. Which command should you use?
Correct command and syntax.
Why this answer
gcloud run services update-traffic allows traffic splitting between revisions.
An engineer needs to create a Cloud Monitoring dashboard that displays CPU utilization for all Compute Engine instances in a project. Which TWO steps are required? (Choose 2)
Why this answer
First, use Metric Explorer to create a chart with the CPU utilization metric. Then, add that chart to a dashboard. Dashboards can have charts from Metric Explorer.
You do not need to create an alert or export logs.
You have a Cloud Run service that experiences intermittent high latency. You want to analyze the latency of specific request paths to identify bottlenecks. You enable Cloud Trace and instrument your application with OpenTelemetry. Which tool or feature should you use to view a waterfall diagram of latencies across services for a single request?
Cloud Trace provides trace details including a waterfall chart showing spans and their latencies for each request.
Why this answer
Cloud Trace provides distributed tracing capabilities, including waterfall diagrams that show the latency of each span in a request. Cloud Logging shows logs, not trace details. Error Reporting aggregates errors.
Metrics Explorer shows aggregated metrics, not per-request traces.
You have a Compute Engine instance that is running a CPU-intensive workload. After monitoring, you realize the machine type needs to be upgraded to a larger CPU. What is the correct sequence to change the machine type?
This is the correct sequence.
Why this answer
Changing the machine type requires stopping the instance, then using gcloud compute instances set-machine-type, and finally starting the instance.
You want to monitor the uptime of an external HTTP endpoint from multiple locations around the world. Which TWO steps should you take? (Choose two.)
Multiple locations are needed for global monitoring.
Why this answer
Uptime checks in Cloud Monitoring allow you to monitor the availability of external HTTP/HTTPS endpoints. To use them, you must create an uptime check (option D) and select multiple geographic locations from which the check will run (option C). Option A is incorrect because log-based metrics measure response times from your application logs, not endpoint uptime; option B is incorrect because Pub/Sub is a messaging service, not a notification channel for uptime checks; option E is incorrect because VPC flow logs track network traffic within your VPC, not external endpoint monitoring.
A developer needs to query BigQuery using the bq command-line tool with standard SQL. Which flag should they include?
Why this answer
The '--use_legacy_sql=false' flag enables standard SQL. By default, bq uses legacy SQL. '--format' controls output format, not SQL dialect. '--project_id' specifies project. '--sync' is not a valid bq flag.
You need to collect and analyze latency traces for a microservices application running on GKE. You want to identify which services are contributing to overall latency. Which Google Cloud service should you enable and use?
Cloud Trace is designed for distributed tracing and latency analysis.
Why this answer
Cloud Trace is a distributed tracing service that collects latency data from applications and provides tools to analyze performance bottlenecks.
You are deploying a GKE cluster with node autoscaling enabled. The cluster runs batch jobs that are sensitive to startup latency. You notice that during scale-up, new nodes take several minutes to become ready. Which action can reduce the time it takes for new nodes to join the cluster?
Correct: custom images with pre-installed software reduce node startup time.
Why this answer
Using a custom image with pre-installed dependencies reduces the time needed for node initialization because the image already contains the required software, avoiding downloads during startup. This is especially beneficial for batch jobs.
Your BigQuery query is taking longer than expected. You want to estimate the query cost before running it and get a preview of how many bytes will be processed. Which bq command should you use?
Correct: --dry_run estimates bytes processed without running the query.
Why this answer
The bq query command with the --dry_run flag (or --dry-run) will process the query and return the amount of data that would be scanned, without executing the query. This helps estimate cost and performance.
A company wants to split traffic between two revisions of a Cloud Run service: 90% to revision 'green' and 10% to revision 'blue'. Which command should they use?
Why this answer
'gcloud run services update-traffic' is the correct command to manage traffic splitting between revisions. 'gcloud run revisions list' only lists revisions. 'gcloud run services update' does not handle traffic directly. 'gcloud run deploy' with --no-traffic is for initial deployment.
An engineer needs to update a Kubernetes Deployment's container image to version v2. They run 'kubectl set image deployment/my-app my-container=gcr.io/my-project/my-image:v2'. After a few minutes, they check the rollout status and see a failure. They want to revert to the previous image. Which command should they use?
Why this answer
'kubectl rollout undo' reverts the Deployment to the previous revision. 'kubectl rollout status' shows status but does not revert. 'kubectl set image' with v1 would manually set the old image, but 'undo' is the standard rollback command.
Your team wants to send Cloud Monitoring alerts to a Slack channel. You have created a Pub/Sub topic and subscription. Which notification channel type should you configure in Cloud Monitoring?
Use a Pub/Sub notification channel to publish messages to a topic for downstream processing.
Why this answer
Cloud Monitoring can send notifications to Pub/Sub topics, which can then be processed by a subscriber like Slack webhook.
You have a Cloud Run service that is experiencing high latency. You want to analyze the latency distribution of requests. Which Google Cloud tool should you use?
Cloud Trace is designed for latency analysis of requests and services.
Why this answer
Cloud Trace is a distributed tracing service that collects latency data from applications and provides detailed analysis, including latency distributions and per-request traces.
You have a Pub/Sub subscription that is accumulating a backlog of messages. Which Cloud Monitoring metric should you alert on to detect this condition?
Correct: this metric shows the age of the oldest unacked message, indicating backlog depth.
Why this answer
The Pub/Sub subscription's 'oldest_unacked_message_age' metric indicates how long the oldest unacknowledged message has been pending. A high value suggests a backlog that is not being processed.
You need to update a deployment in your GKE cluster from image version v1 to v2 gradually, ensuring that only a small percentage of pods run v2 initially. After the rollout, you want to verify the rollout status. Which commands should you use?
Correct: set image updates the deployment, and rollout status monitors progress until complete.
Why this answer
Use kubectl set image to update the image, then kubectl rollout status to monitor the rollout. For gradual rollout, you can use kubectl rollout pause/resume or set maxSurge/maxUnavailable, but the question asks for the command to update and verify.
You need to set up an alert that triggers when the 99th percentile latency of your HTTP(S) load balancer exceeds 5 seconds for 5 minutes. Which THREE resources must you create or configure? (Choose three.)
The policy ties the condition and notification together.
Why this answer
To alert on latency exceeding a threshold, you must create an alerting policy (B), which requires a notification channel (C) to send alerts and a metric threshold condition (E) that defines when to trigger. An uptime check (A) is for availability monitoring, not latency percentiles. A log-based metric (D) is not needed because latency data is provided by Cloud Monitoring metrics directly.
Your application running on Compute Engine is experiencing intermittent high latency. You need to diagnose the root cause. Which THREE tools or services should you use to gather data? (Choose 3)
Correct: to view metrics like CPU, memory, network, and set up dashboards.
Why this answer
Cloud Monitoring provides metrics and dashboards; Cloud Logging provides logs; Cloud Trace provides trace data for latency analysis. Together they cover metrics, logs, and traces for comprehensive troubleshooting.
A company wants to export all Cloud Logging logs to BigQuery for long-term analysis. They create a log sink with a BigQuery dataset as the destination. After a few days, they notice that some logs are missing in BigQuery. What is the most likely reason?
Why this answer
Log sinks have a buffer period of up to a few minutes, but they guarantee delivery. However, if the sink's filter excludes certain logs (e.g., by resource type or severity), those logs are not exported. Missing logs usually indicate a filter misconfiguration.
Your GKE cluster nodes are running low on resources. You need to enable node pool autoscaling so that the cluster automatically adds and removes nodes based on demand. The node pool is named 'default-pool'. Which command completes this task?
Correct command for node pool autoscaling.
Why this answer
gcloud container node-pools update with --enable-autoscaling enables autoscaling, and --min-nodes/--max-nodes set boundaries.
Your organization runs a critical application on Compute Engine VMs. You have created a snapshot schedule, but you need to ensure that snapshots of disks attached to running instances are crash-consistent. What must you do before taking the snapshot?
Stopping the VM guarantees that all writes are flushed to disk, producing a crash-consistent snapshot.
Why this answer
Crash-consistent snapshots require no special preparation if the disk is not attached or the VM is stopped. For running instances, you must stop the VM or flush disk caches to ensure crash consistency.
An engineer needs to create an alerting policy in Cloud Monitoring that sends a notification when the 99th percentile latency of a service exceeds 500 ms for 5 minutes. Which metric type should they use?
Why this answer
A metric threshold alert uses a numeric metric and triggers when the value crosses a threshold. Log-based alerts are for when a specific log entry appears. Uptime checks monitor availability, not latency percentiles.
You need to change the machine type of a running Compute Engine instance from n1-standard-4 to n1-standard-8. What is the correct procedure?
This is the required sequence.
Why this answer
Changing machine type requires stopping the instance first.
You need to export all Cloud Logging logs from a specific project to BigQuery for long-term analysis. What should you create?
Log sinks export logs to a destination. BigQuery is a supported destination.
Why this answer
Log sinks in Cloud Logging allow you to route logs to destinations like BigQuery, Cloud Storage, or Pub/Sub. You create a sink with BigQuery as the destination.
You need to attach an existing 100 GB persistent disk named 'my-disk' to a Compute Engine instance 'web-server-1'. What is the correct command?
This attaches the disk to the instance.
Why this answer
The command is gcloud compute instances attach-disk.
A developer needs to check the latest logs from a Compute Engine instance to debug a failed startup script. They want to filter logs from the last hour with severity ERROR or higher. Which Cloud Logging query language filter should they use?
Uses resource.type for GCE instances, time range -1h, and severity>=ERROR to include ERROR, CRITICAL, ALERT, EMERGENCY.
Why this answer
The correct filter is A. It uses `resource.type="gce_instance"` to target Compute Engine instances, `timestamp>="-1h"` to get logs from the last hour, and `severity>=ERROR` to capture ERROR, CRITICAL, ALERT, and EMERGENCY levels. Option B is incorrect because `severity=ERROR` matches only ERROR, not higher severities.
Option C uses a wrong resource type and `timestamp<"-1h"` which is before the last hour. Option D uses `resource.labels.instance_id="*"` which is not a valid wildcard syntax for instance IDs.
A team needs to analyze application logs to find errors from the last 24 hours. The logs are stored in Cloud Logging. Which query language filters would select log entries where the severity is ERROR and the resource type is a GCE VM instance?
This filter correctly specifies the resource type and severity.
Why this answer
Cloud Logging query language uses filters like resource.type and severity. The correct syntax uses parentheses for conditions.
You want to receive notifications when a specific metric exceeds a threshold. Which Cloud Monitoring resource defines the condition and the action?
Alerting policies define conditions and actions like sending notifications.
Why this answer
An alerting policy defines conditions (metric threshold) and notification channels.
You need to drain a GKE node for maintenance. Which THREE steps should you perform? (Select 3)
Standard drain command.
Why this answer
Draining a node evicts pods while respecting PodDisruptionBudgets, and after draining you can perform maintenance or delete the node.
You are using Cloud Logging and want to export all logs from a specific Compute Engine instance to BigQuery for long-term analysis. You create a log sink with a filter for the instance's resource type and labels. What additional step is required to complete the export?
Correct: the dataset must exist, and the sink's writer identity needs write access to the dataset.
Why this answer
Log sinks require a destination. For BigQuery, the sink must be configured with the destination as a BigQuery dataset. You must create the dataset first, then specify it in the sink.
The sink also needs appropriate permissions on the dataset.
You are managing a GKE cluster and need to upgrade the node pool to a newer Kubernetes version. Which THREE steps should you perform as part of the upgrade process?
Correct: the control plane must be at or above the target version before upgrading node pools.
Why this answer
To upgrade a node pool, you first upgrade the control plane (if not already upgraded), then upgrade the node pool. You can use gcloud container clusters upgrade to upgrade the cluster (control plane) or node pool. If you want to minimize disruption, you may also consider draining nodes beforehand, but it is not strictly required if you use surge upgrade.
The question asks for steps in the process.
You need to split traffic between two revisions of your Cloud Run service: revision-1 (stable) should receive 90% of traffic, and revision-2 (canary) should receive 10%. Which command should you run?
Correct: this sets the traffic split as specified.
Why this answer
The gcloud run services update-traffic command allows you to specify traffic percentages per revision. You can use --to-revisions to assign percentages.
You have a Cloud Run service that you want to update to use a new container image. You also want to keep the previous revision available in case you need to roll back. Which command should you use?
Deploy creates a new revision and retains old ones.
Why this answer
gcloud run deploy creates a new revision and by default keeps the previous revision(s).
Your application uses Pub/Sub to process orders. You notice that the subscription backlog is growing. Which tool should you use to analyze the latency of each step in the processing pipeline?
Cloud Trace traces requests across services to identify latency.
Why this answer
Cloud Trace provides end-to-end latency analysis across distributed services, helping identify bottlenecks.
You are troubleshooting a slow Pub/Sub subscription. Which three steps should you take to diagnose the issue? (Choose three.)
Backlog indicates how many unacknowledged messages are pending.
Why this answer
Cloud Monitoring (Metrics Explorer) can show subscription backlog, Cloud Logging can show subscriber errors, and checking the subscription's backlog via gcloud or console helps assess the issue. Cloud Trace is for HTTP-based services, not Pub/Sub directly. Cloud Debugger is for code debugging, not Pub/Sub monitoring.
Your organization runs a stateful workload on a Compute Engine VM with a 500 GB persistent disk. You need to resize the VM to a machine type with more CPUs and memory, while minimizing downtime. You also need to ensure the disk is backed up before the change. What is the correct sequence of steps?
Correct order: stop VM, create disk snapshot (command uses 'disks snapshot' with --snapshot-names), change machine type, start.
Why this answer
To change the machine type of a Compute Engine VM, the VM must be stopped. Option A correctly sequences: stop the VM first, then create a disk snapshot for backup, then change the machine type, then start the VM. Option C uses a valid snapshot command but the order is the same as A; however, option A is marked correct.
Option B fails because it attempts to change the machine type without stopping the VM first, which is not allowed. Option D also changes the machine type without stopping and creates a snapshot after starting, which is incorrect.
You need to drain a GKE node for maintenance. The node runs DaemonSet pods and pods using emptyDir volumes. Which kubectl drain command correctly handles these pods without causing disruption to critical system components?
This combination correctly ignores DaemonSet pods (which are automatically rescheduled) and allows eviction of pods with emptyDir volumes, minimizing disruption to system components.
Why this answer
The kubectl drain command evicts pods from a node. To handle DaemonSet pods (which should be ignored because they are managed by the DaemonSet controller) and pods with emptyDir volumes (which may need --delete-emptydir-data to force eviction), you use --ignore-daemonsets and --delete-emptydir-data.
A GKE cluster is running a critical workload. An engineer needs to perform maintenance on a node without disrupting the pods. They plan to use 'kubectl drain'. Which additional flags are typically required to safely drain a node?
Why this answer
The '--ignore-daemonsets' flag tells kubectl to ignore DaemonSet-managed pods (they will be rescheduled). The '--delete-emptydir-data' flag allows draining nodes with pods using emptyDir volumes (data is ephemeral). Both are commonly required for safe draining.
You need to export all logs from Cloud Logging to a BigQuery dataset for long-term analysis. The export should include logs from all projects in the organization. Which TWO actions should you take? (Choose two.)
Log sinks can export to BigQuery. The sink must specify the BigQuery dataset as the destination.
Why this answer
To export logs to BigQuery for analysis, you must create a log sink with the destination type set to BigQuery dataset (option B). To include logs from all projects within the organization, you must create the sink at the organization level (option D), which allows the sink to aggregate logs from all projects under that organization. Option A is incorrect because a Cloud Storage bucket is not the desired destination for BigQuery analysis.
Option C is incorrect because log-based metrics are used for monitoring and alerting, not exporting logs. Option E is incorrect because creating sinks at the project level individually would require managing multiple sinks and does not leverage the organization-wide aggregation provided by an organization-level sink. Therefore, the correct actions are B and D.
Your BigQuery dataset contains a table with sensitive customer data. You want to allow a data analyst to query the table but prevent them from viewing the data directly. You also need to ensure they cannot export the data. Which TWO IAM roles should you grant the analyst? (Choose two.)
Allows running query jobs.
Why this answer
To allow the analyst to query the table without viewing data directly, you should grant the bigquery.jobUser role, which provides permission to run queries (bigquery.jobs.create). To prevent direct viewing, you must not grant bigquery.dataViewer on the table, as that allows direct data access. Instead, create an authorized view that exposes only the necessary columns/rows, and grant bigquery.dataViewer on that view.
For export prevention, bigquery.jobUser alone does not allow export; additional roles like storage.objectViewer or bigquery.dataEditor would be required for export, so they are not needed. Thus, the only IAM role needed from the options is roles/bigquery.jobUser.
You want to stop a Compute Engine instance to reduce costs. It will be started again in a few hours. Which command should you use?
Stop suspends the instance, preserving its state and attached disks.
Why this answer
The gcloud compute instances stop command gracefully stops the instance.
An engineer needs to attach an existing persistent disk to a Compute Engine instance. They have created the disk using 'gcloud compute disks create'. Which command should they use to attach it?
Why this answer
'gcloud compute instances attach-disk' attaches a disk to an instance. 'gcloud compute disks attach' does not exist. 'gcloud compute instances add-disk' is not a valid command. 'gcloud compute disks resize' resizes the disk.
You want to export a subset of Cloud Logging logs to BigQuery for long-term analysis. Which method should you use?
Log sinks are designed for exporting logs to specified destinations.
Why this answer
Log sinks route logs to destinations like BigQuery, Cloud Storage, or Pub/Sub. Creating a sink with a filter is the correct approach.
You want to monitor the uptime of an external HTTP endpoint every minute and receive an email notification if the endpoint is unavailable for more than two consecutive checks. What should you do?
Uptime check plus alerting policy with metric threshold condition is the correct approach.
Why this answer
Uptime checks in Cloud Monitoring can be configured to check HTTP endpoints. You can set alerting conditions based on the duration of the outage and choose email as a notification channel.
You need to export logs from Cloud Logging to a BigQuery dataset for long-term analysis. What should you create?
A log sink routes logs to BigQuery, Cloud Storage, or Pub/Sub.
Why this answer
Log sinks are used to route logs to destinations like BigQuery, Cloud Storage, or Pub/Sub.
You need to drain a GKE node for maintenance, ensuring that daemonsets and pods using emptyDir volumes are handled properly. Which command should you use?
These flags properly handle daemonsets and emptyDir volumes.
Why this answer
kubectl drain with flags ignores daemonsets and deletes emptyDir pods.
You need to resize a Compute Engine instance from n1-standard-4 to n1-highmem-8. The instance has a local SSD attached. What must you do before changing the machine type?
Correct: stopping is required to change machine type. Local SSD data will be lost, but that is expected.
Why this answer
To change the machine type, the instance must be stopped. Local SSDs preserve data only if the instance is not stopped or terminated; however, when you stop the instance, local SSD data is lost. The correct procedure is to stop the instance, change the machine type, and then start it.
Data on local SSDs will be lost.
An application is experiencing intermittent high latency. Using Cloud Trace, an engineer identifies that the bottleneck is a Pub/Sub subscription with a large backlog. Which action would MOST directly help reduce the backlog?
Why this answer
Increasing the number of subscribers (e.g., scaling out the subscriber application) will increase the processing rate and reduce backlog. Increasing the retention duration keeps messages longer, not reducing backlog. The ack deadline and message size are not the primary causes of backlog.
You need to export all Cloud Logging logs from your project to BigQuery for long-term analysis. What should you create?
A log sink can export logs to BigQuery datasets.
Why this answer
Log sinks route logs to supported destinations including BigQuery.
You are investigating high latency in your application deployed on Compute Engine. You suspect a specific API call is taking longer than expected. Which Google Cloud tool should you use to analyze the latency of individual requests?
Correct: Cloud Trace is designed for latency analysis and distributed tracing.
Why this answer
Cloud Trace provides distributed tracing, allowing you to see the latency of individual requests and identify bottlenecks. It captures trace spans from supported frameworks and services.
You are deploying a new revision of a Cloud Run service. You want to gradually shift traffic from the old revision to the new one, starting with 10% traffic to the new revision. Which command should you use?
This command sets 10% traffic to the new revision.
Why this answer
Cloud Run allows traffic splitting between revisions. The gcloud run services update-traffic command can specify the percentage of traffic for each revision.
You manage a Google Kubernetes Engine (GKE) cluster and need to update the deployment 'web-app' to use a new container image tag 'v2'. You also want to ensure the update proceeds and, if it fails, roll back to the previous revision. Which set of commands should you use?
This correctly updates the image, checks rollout status, and provides a rollback command if needed.
Why this answer
kubectl set image updates the image; kubectl rollout status monitors progress; kubectl rollout undo reverts to the previous revision.
You have a GKE cluster with a node pool that needs to scale automatically based on load. The cluster was created with autoscaling disabled. Which command enables autoscaling on an existing node pool?
This correctly enables autoscaling on the specified node pool.
Why this answer
gcloud container node-pools update with --enable-autoscaling and min/max node parameters enables autoscaling.
You need to set up log-based alerting in Cloud Logging to send notifications when a specific error pattern appears in your application logs. Which TWO components are required to accomplish this?
Correct: the policy sets the threshold and notification channels.
Why this answer
To create a log-based alert, you need a log-based metric that counts the matching log entries, and an alerting policy that uses that metric. The metric is the source of the condition, and the policy defines when to notify.
You are troubleshooting a Pub/Sub subscription that is not delivering messages promptly. Which THREE factors should you investigate? (Choose THREE.)
A large backlog indicates slow processing.
Why this answer
Common causes include backlog, subscriber latency, and ack deadlines.
You have a Compute Engine VM instance that is currently running. You need to resize it to a different machine type. What must you do first?
Correct procedure: stop the instance, change machine type, start.
Why this answer
Changing the machine type requires the VM to be in a stopped state. You must stop the instance, change the machine type, then start it.
A company wants to automate the response to specific log entries by triggering a Cloud Function. Which THREE components are required? (Choose 3)
Why this answer
Log entries must be routed to a Pub/Sub topic via a log sink. The Cloud Function subscribes to that topic (triggered by Pub/Sub). The log sink is the exporter, Pub/Sub is the intermediary, and Cloud Function is the action.
A notification channel is for alerts, not triggers. BigQuery is not needed.
Your GKE cluster has a node pool that is underutilized. You want to enable cluster autoscaling to automatically adjust the number of nodes based on workload demand. Which TWO steps are required? (Choose two.)
Minimum and maximum node counts must be set for autoscaling to work.
Why this answer
To enable cluster autoscaling on a GKE node pool, you need to specify minimum and maximum node limits (option B) and enable autoscaling on the specific node pool using `gcloud container node-pools update` with the `--enable-autoscaling` flag (option E). Option A is incorrect because upgrading the control plane is unrelated to autoscaling. Option C is incorrect because `gcloud container clusters update` does not accept a `--node-pool` flag for enabling autoscaling on a pool.
Option D is incorrect because `--autoscaling-profile` is an optional tuning parameter, not a required step.
An engineer needs to monitor the external HTTP availability of a web application hosted on Compute Engine. Which Cloud Monitoring feature should they use?
Why this answer
Uptime checks are designed to verify that a resource is accessible and measure response latency from various locations. They can check HTTP/HTTPS/TCP endpoints.
A Cloud Run service is experiencing high latency. You suspect one revision is causing the issue. The service is configured to split traffic 90% to revision A and 10% to revision B. You want to gradually shift traffic back to revision A only. Which command should you use?
This sets 100% traffic to revision A (represented by the revision name).
Why this answer
gcloud run services update-traffic allows you to set traffic percentages for revisions. Setting 100% to revision A achieves the goal.
You need to find all log entries from the past hour where a Compute Engine instance failed to start. Which Cloud Logging query language filter should you use?
This filter targets Compute Engine instances, ERROR severity, a specific error message, and the last hour.
Why this answer
The correct filter combines resource type, severity, and a timestamp range.
You need to update the container image of a deployment named 'my-app' in GKE to a new version. Which command should you use?
This updates the container named 'my-app-container' to the new image.
Why this answer
kubectl set image updates the image of a deployment.
You want to view recent errors from your Compute Engine instances using Cloud Logging. Which query language statement would you use in the Log Explorer?
This query correctly filters logs from Compute Engine instances with ERROR severity.
Why this answer
In Cloud Logging, you can filter logs by resource type and severity. The correct syntax uses fields like resource.type and severity.
An engineer is troubleshooting a Compute Engine instance that is unreachable via SSH. They suspect a firewall rule is blocking traffic. Which TWO actions should they take to diagnose the issue? (Choose 2)
Why this answer
In Cloud Logging, you can view firewall logs (if VPC flow logs are enabled, but firewall rules logging can be enabled per rule). Checking VPC firewall rules in the Cloud Console allows you to verify the rules. Cloud Trace is for latency, Cloud Monitoring for metrics, and gcloud compute ssh is for connecting, not diagnosing firewall rules.
You need to perform a rolling update of a GKE deployment and ensure that during the update, the new pods are ready before terminating the old ones. You have already set the update strategy to RollingUpdate. Which kubectl command sequence should you use to update the image and monitor the rollout?
This updates the image and monitors the rollout status.
Why this answer
kubectl set image updates the image; kubectl rollout status monitors the progress. If the rollout fails, kubectl rollout undo rolls back.
You need to set up an alerting policy to notify your team via email and Slack when a Compute Engine instance's CPU utilization exceeds 80% for 5 minutes. Which two resources must you configure? (Choose two.)
This condition triggers when CPU exceeds 80% for the specified duration.
Why this answer
To create an alerting policy, you need a metric threshold condition (e.g., CPU utilization > 80% for 5 minutes) and notification channels (email, Slack). Uptime checks are for availability, not performance metrics. Log-based alerts are for log events, not metrics.
You need to drain a GKE node for maintenance without disrupting running workloads that are managed by a DaemonSet. Which TWO flags should you use with kubectl drain? (Choose two.)
Necessary if any pods use emptyDir volumes; the question doesn't specify, but it's a common flag used in drains.
Why this answer
kubectl drain evicts pods. By default, it will fail if there are pods not managed by a ReplicationController/ReplicaSet/Deployment or if there are DaemonSet pods. The --ignore-daemonsets flag allows draining despite DaemonSet pods.
The --delete-emptydir-data flag is needed if any pods use emptyDir volumes.
Your GKE cluster is running a deployment with a container image my-app:v1. You need to update it to my-app:v2 and monitor the rollout progress. Which commands should you use?
Correct sequence to update and monitor rollout.
Why this answer
kubectl set image updates the deployment, and kubectl rollout status monitors progress.
You need to alert when the CPU utilization of your Compute Engine instance exceeds 80% for 5 minutes. What should you create in Cloud Monitoring?
Metric threshold alerts evaluate metric data against a threshold over time.
Why this answer
A metric threshold alerting policy triggers when a metric crosses a threshold for a specified duration.
You need to create a log-based metric that counts the number of 5xx errors from your application logs. The logs are in Cloud Logging and contain a field "httpRequest.status". Which filter should you use when creating the metric?
This filter correctly selects log entries with status code 500 or greater.
Why this answer
Log-based metrics use Cloud Logging filter language to select log entries.
You want to create a snapshot of a persistent disk named 'my-disk' in zone us-central1-a. Which command should you use?
This creates a snapshot of the disk with the given name.
Why this answer
The gcloud compute disks snapshot command creates a snapshot of the specified disk. You need to provide the disk name and zone.
You are designing a disaster recovery plan for a stateful application running on Compute Engine. You need to create crash-consistent backups of persistent disks every hour and store them in a different region for at least 30 days. Which TWO steps should you take? (Choose two.)
Stopping the VM ensures crash consistency.
Why this answer
Snapshots are stored in regional locations, but can be moved using image creation. You need to stop the instance for crash consistency, then create snapshots. To store in a different region, you can create a disk from the snapshot in the new region or use image sharing.
The correct combination: stop the instance, create a snapshot, then copy or store the snapshot in the target region.
You have a BigQuery table with billions of rows. You need to create a new table with the same schema and copy all data from the original table. Which approach is most efficient?
The most efficient method; bq cp copies the table server-side without reading or moving data, making it fast and cost-effective.
Why this answer
Option D (bq cp) is the most efficient method because it copies the table entirely within BigQuery's backend, avoiding any data egress or transformation. It is a fast, server-side operation. Option C (bq query with destination table) also works but is less efficient as it triggers a full table scan (reading all rows) and rewrites the data, which can incur query costs and take longer for large tables.
Option A is inefficient due to row-by-row inserts, and Option B requires an unnecessary export/load cycle to Cloud Storage.
Exam trap
Candidates often think bq cp is only for Cloud Storage objects, but it also works for copying BigQuery tables.
Ready to test yourself?
Try a timed practice session using only Ensuring Successful Operation of a Cloud Solution questions.