Users of your application are complaining of slowness when loading the application. You realize the slowness is because the App Engine deployment serving the application is deployed in us-central whereas all users of this application are closest to europe-west3. You want to change the region of the App Engine application to europe-west3 to minimize latency. What’s the best way to change the App Engine region?

1. A. Create a new project and create an App Engine instance in europe-west3
2. B. Use the gcloud app region set command and supply the name of the new region.
3. C. From the console, under the App Engine page, click edit, and change the region drop-down.
4. D. Contact Google Cloud Support and request the change.

Correct Answer: A
App engine is a regional service, which means the infrastructure that runs your app(s) is located in a specific region and is managed by Google to be redundantly available across all the zones within that region. Once an app engine deployment is created in a region, it cant be changed. The only way is to create a new project and create an App Engine instance in europe-west3, send all user traffic to this instance and delete the app engine instance in us-central.
Ref: https://cloud.google.com/appengine/docs/locations

Your existing application running in Google Kubernetes Engine (GKE) consists of multiple pods running on four GKE n1–standard–2 nodes. You need to deploy additional pods requiring n2–highmem–16 nodes without any downtime. What should you do?

1. A. Use gcloud container clusters upgrad
2. B. Deploy the new services.
3. C. Create a new Node Pool and specify machine type n2–highmem–16. Deploy the new pods.
4. D. Create a new cluster with n2–highmem–16 node
5. E. Redeploy the pods and delete the old cluster.
6. F. Create a new cluster with both n1–standard–2 and n2–highmem–16 node
7. G. Redeploy the pods and delete the old cluster.

Correct Answer: B
https://cloud.google.com/kubernetes-engine/docs/concepts/deployment

You are monitoring an application and receive user feedback that a specific error is spiking. You notice that the error is caused by a Service Account having insufficient permissions. You are able to solve the problem but want to be notified if the problem recurs. What should you do?

1. A. In the Log Viewer, filter the logs on severity 'Error' and the name of the Service Account.
2. B. Create a sink to BigQuery to export all the log
3. C. Create a Data Studio dashboard on the exported logs.
4. D. Create a custom log-based metric for the specific error to be used in an Alerting Policy.
5. E. Grant Project Owner access to the Service Account.

Correct Answer: C

You are designing an application that lets users upload and share photos. You expect your application to grow really fast and you are targeting a worldwide audience. You want to delete uploaded photos after 30 days. You want to minimize costs while ensuring your application is highly available. Which GCP storage solution should you choose?

1. A. Persistent SSD on VM instances.
2. B. Cloud Filestore.
3. C. Multiregional Cloud Storage bucket.
4. D. Cloud Datastore database.

Correct Answer: C
Cloud Storage allows world-wide storage and retrieval of any amount of data at any time. We dont need to set up auto-scaling ourselves. Cloud Storage autoscaling is managed by GCP. Cloud Storage is an object store so it is suitable for storing photos. Cloud Storage allows world-wide storage and retrieval so cater well to our worldwide audience. Cloud storage provides us lifecycle rules that can be configured to automatically delete objects older than 30 days. This also fits our requirements. Finally, Google Cloud Storage offers several storage classes such as Nearline Storage ($0.01 per GB per Month) Coldline Storage ($0.007 per GB per Month) and Archive Storage ($0.004 per GB per month) which are significantly cheaper than any of the options above.
Ref: https://cloud.google.com/storage/docs
Ref: https://cloud.google.com/storage/pricing

An application generates daily reports in a Compute Engine virtual machine (VM). The VM is in the project corp-iot-insights. Your team operates only in the project corp-aggregate-reports and needs a copy of the daily exports in the bucket corp-aggregate-reports-storage. You want to configure access so that the daily reports from the VM are available in the bucket corp-aggregate-reports-storage and use as few steps as possible while following Google-recommended practices. What should you do?

1. A. Move both projects under the same folder.
2. B. Grant the VM Service Account the role Storage Object Creator on corp-aggregate-reports-storage.
3. C. Create a Shared VPC network between both project
4. D. Grant the VM Service Account the role Storage Object Creator on corp-iot-insights.
5. E. Make corp-aggregate-reports-storage public and create a folder with a pseudo-randomized suffix name.Share the folder with the IoT team.

Correct Answer: B
Predefined roles
The following table describes Identity and Access Management (IAM) roles that are associated with Cloud Storage and lists the permissions that are contained in each role. Unless otherwise noted, these roles can be applied either to entire projects or specific buckets.
Storage Object Creator (roles/storage.objectCreator) Allows users to create objects. Does not give permission to view, delete, or overwrite objects.
https://cloud.google.com/storage/docs/access-control/iam-roles#standard-roles