- (Exam Topic 2)
You are developing an application using different microservices that should remain internal to the cluster. You want to be able to configure each microservice with a specific number of replicas. You also want to be able to address a specific microservice from any other microservice in a uniform way, regardless of the number of replicas the microservice scales to. You need to implement this solution on Google Kubernetes Engine. What should you do?

1. A. Deploy each microservice as a Deploymen
2. B. Expose the Deployment in the cluster using a Service, and use the Service DNS name to address it from other microservices within the cluster.
3. C. Deploy each microservice as a Deploymen
4. D. Expose the Deployment in the cluster using an Ingress, and use the Ingress IP address to address the Deployment from other microservices within the cluster.
5. E. Deploy each microservice as a Po
6. F. Expose the Pod in the cluster using a Service, and use the Service DNS name to address the microservice from other microservices within the cluster.
7. G. Deploy each microservice as a Po
8. H. Expose the Pod in the cluster using an Ingress, and use the Ingress IP address name to address the Pod from other microservices within the cluster.

Correct Answer: A

- (Exam Topic 2)
You are writing a Compute Engine hosted application in project A that needs to securely authenticate to a Cloud Pub/Sub topic in project B.
What should you do?

1. A. Configure the instances with a service account owned by project
2. B. Add the service account as a Cloud Pub/Sub publisher to project A.
3. C. Configure the instances with a service account owned by project
4. D. Add the service account as a publisher on the topic.
5. E. Configure Application Default Credentials to use the private key of a service account owned by project
6. F. Add the service account as a Cloud Pub/Sub publisher to project A.
7. G. Configure Application Default Credentials to use the private key of a service account owned by project
8. H. Add the service account as a publisher on the topic

Correct Answer: B
https://cloud.google.com/pubsub/docs/access-control
"For example, suppose a service account in Cloud Project A wants to publish messages to a topic in Cloud Project B. You could accomplish this by granting the service account Edit permission in Cloud Project B"

- (Exam Topic 2)
You recently deployed your application in Google Kubernetes Engine, and now need to release a new version of your application. You need the ability to instantly roll back to the previous version in case there are issues with the new version. Which deployment model should you use?

1. A. Perform a rolling deployment, and test your new application after the deployment is complete.
2. B. Perform A/B testing, and test your application periodically after the new tests are implemented.
3. C. Perform a blue/green deployment, and test your new application after the deployment i
4. D. complete.
5. E. Perform a canary deployment, and test your new application periodically after the new version is deployed.

Correct Answer: C

- (Exam Topic 2)
You plan to deploy a new application revision with a Deployment resource to Google Kubernetes Engine (GKE) in production. The container might not work correctly. You want to minimize risk in case there are issues after deploying the revision. You want to follow Google-recommended best practices. What should you do?

1. A. Perform a rolling update with a PodDisruptionBudget of 80%.
2. B. Perform a rolling update with a HorizontalPodAutoscaler scale-down policy value of 0.
3. C. Convert the Deployment to a StatefulSet, and perform a rolling update with a PodDisruptionBudget of 80%.
4. D. Convert the Deployment to a StatefulSet, and perform a rolling update with a HorizontalPodAutoscaler scale-down policy value of 0.

Correct Answer: A
https://cloud.google.com/blog/products/containers-kubernetes/ensuring-reliability-and-uptime-for-your-gke-clus Setting PodDisruptionBudget ensures that your workloads have a sufficient number of replicas, even during maintenance. Using the PDB, you can define a number (or percentage) of pods that can be terminated, even if terminating them brings the current replica count below the desired value. With PDB configured, Kubernetes will drain a node following the configured disruption schedule. New pods will be deployed on other available nodes. This approach ensures Kubernetes schedules workloads in an optimal way while controlling the disruption based on the PDB configuration.
https://blog.knoldus.com/how-to-avoid-outages-in-your-kubernetes-cluster-using-pdb/

- (Exam Topic 2)
You are a developer working with the CI/CD team to troubleshoot a new feature that your team introduced. The CI/CD team used HashiCorp Packer to create a new Compute Engine image from your development branch. The image was successfully built, but is not booting up. You need to investigate the issue with the CI/CD team. What should you do?

1. A. Create a new feature branch, and ask the build team to rebuild the image.
2. B. Shut down the deployed virtual machine, export the disk, and then mount the disk locally to access the boot logs.
3. C. Install Packer locally, build the Compute Engine image locally, and then run it in your personal Google Cloud project.
4. D. Check Compute Engine OS logs using the serial port, and check the Cloud Logging logs to confirm access to the serial port.

Correct Answer: D
https://cloud.google.com/compute/docs/troubleshooting/troubleshooting-using-serial-console