- (Exam Topic 2)
You are creating a Google Kubernetes Engine (GKE) cluster and run this command:

The command fails with the error:

You want to resolve the issue. What should you do?

1. A. Request additional GKE quota is the GCP Console.
2. B. Request additional Compute Engine quota in the GCP Console.
3. C. Open a support case to request additional GKE quotA.
4. D. Decouple services in the cluster, and rewrite new clusters to function with fewer cores.

Correct Answer: A

- (Exam Topic 2)
Your team is writing a backend application to implement the business logic for an interactive voice response (IVR) system that will support a payroll application. The IVR system has the following technical characteristics:
• Each customer phone call is associated with a unique IVR session.
• The IVR system creates a separate persistent gRPC connection to the backend for each session.
• If the connection is interrupted, the IVR system establishes a new connection, causing a slight latency for that call.
You need to determine which compute environment should be used to deploy the backend application. Using current call data, you determine that:
• Call duration ranges from 1 to 30 minutes.
• Calls are typically made during business hours.
• There are significant spikes of calls around certain known dates (e.g., pay days), or when large payroll changes occur.
You want to minimize cost, effort, and operational overhead. Where should you deploy the backend application?

1. A. Compute Engine
2. B. Google Kubernetes Engine cluster in Standard mode
3. C. Cloud Functions
4. D. Cloud Run

Correct Answer: D
This page shows Cloud Run-specific details for developers who want to use gRPC to connect a Cloud Run service with other services, for example, to provide simple, high performance communication between internal microservices. You can use all gRPC types, streaming or unary, with Cloud Run.
Possible use cases include:
Communication between internal microservices.
High loads of data (gRPC uses protocol buffers, which are up to seven times faster than REST calls). Only a simple service definition is needed, you don't want to write a full client library.
Use streaming gRPCs in your gRPC server to build more responsive applications and APIs. https://cloud.google.com/run/docs/tutorials/secure-services#:~:text=The%20backend%20service%20is%20priva

- (Exam Topic 2)
You have deployed an HTTP(s) Load Balancer with the gcloud commands shown below.

Health checks to port 80 on the Compute Engine virtual machine instance are failing and no traffic is sent to your instances. You want to resolve the problem.
Which commands should you run?

1. A. gcloud compute instances add-access-config ${NAME}-backend-instance-1
2. B. gcloud compute instances add-tags ${NAME}-backend-instance-1 --tags http-server
3. C. gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --source-ranges 130.211.0.0/22,35.191.0.0/16 --direction INGRESS
4. D. gcloud compute firewall-rules create allow-lb --network load-balancer --allow tcp --destination-ranges 130.211.0.0/22,35.191.0.0/16 --direction EGRESS

Correct Answer: C
Reference: https://cloud.google.com/vpc/docs/special-configurations

- (Exam Topic 2)
You are developing a microservice-based application that will run on Google Kubernetes Engine (GKE). Some of the services need to access different Google Cloud APIs. How should you set up authentication of these services in the cluster following Google-recommended best practices? (Choose two.)

1. A. Use the service account attached to the GKE node.
2. B. Enable Workload Identity in the cluster via the gcloud command-line tool.
3. C. Access the Google service account keys from a secret management service.
4. D. Store the Google service account keys in a central secret management service.
5. E. Use gcloud to bind the Kubernetes service account and the Google service account using roles/iam.workloadIdentity.

Correct Answer: BE
https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity

- (Exam Topic 2)
You have an application in production. It is deployed on Compute Engine virtual machine instances controlled by a managed instance group. Traffic is routed to the instances via a HTTP(s) load balancer. Your users are unable to access your application. You want to implement a monitoring technique to alert you when the application is unavailable.
Which technique should you choose?

1. A. Smoke tests
2. B. Stackdriver uptime checks
3. C. Cloud Load Balancing - heath checks
4. D. Managed instance group - heath checks

Correct Answer: B
Reference: https://medium.com/google-cloud/stackdriver-monitoring-automation-part-3-uptime-checks- 476b8507f59c