谷歌助理云工程师(ACE)考试真题（61-80）

Question 61

Your organization is a financial company that needs to store audit log files for 3 years. Your organization has hundreds of Google Cloud projects. You need to implement a cost-effective approach for log file retention. What should you do?

A. Create an export to the sink that saves logs from Cloud Audit to BigQuery.

B. Create an export to the sink that saves logs from Cloud Audit to a Coldline Storage bucket.

C. Write a custom script that uses logging API to copy the logs from Stackdriver logs to BigQuery.

D. Export these logs to Cloud Pub/Sub and write a Cloud Dataflow pipeline to store logs to Cloud SQL.

你的组织是一家金融公司，需要存储 3 年的 Audit Log 文件。你的组织有数百个 Google Cloud 项目。你需要实施一个具有成本效益的方法来保留日志文件。你应该怎么做？

A. 创建一个导出到水槽，将日志从 Cloud Audit 保存到 BigQuery。

B. 创建一个导出到水槽，将日志从 Cloud Audit 保存到 Coldline Storage bucket。

C. 编写一个自定义脚本，使用日志 API 将日志从 Stackdriver 日志复制到 BigQuery。

D. 将这些日志导出到 Cloud Pub/Sub，并编写一个 Cloud Dataflow pipeline，将日志存储到 Cloud SQL。

正确答案：

B

参考：

https://cloud.google.com/logging/docs/audit/

Question says audit log files will be stored for 3 years. Coldline storage is perfect for storing objects for years.

Question 62

You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website. This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?

A. Create a Cloud Memorystore for Redis instance with 32-GB capacity.

B. Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.

C. Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.

D. Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.

你想在 GCP 上为一个对延迟敏感的网站运行一个单独的缓存 HTTP 反向代理。这个特定的反向代理几乎不消耗 CPU。你希望有一个 30GB 的内存缓存，并需要额外的 2GB 内存用于其他的进程。你想尽量减少成本。你应该如何运行这个反向代理？

A. 创建一个具有 32GB 容量的 Cloud Memorystore for Redis 实例。

B. 在 Compute Engine 上运行它，并选择一个具有 6 个 vCPUs 和 32GB 内存的自定义实例类型。

C. 将其打包成容器镜像，并在 Kubernetes Engine上运行，使用 n1-standard-32 实例作为节点。

D. 在 Compute Engine 上运行它，选择实例类型 n1-standard-1，并添加一个 32GB 的 SSD 持久化磁盘。

正确答案：

A

参考：

Redis 简介Redis 是完全开源的，遵守BSD 协议，是一个高性能的key-value 数据库

What it's good for Memorystore for Redis provides a fast, in-memory store for use cases that require fast, real-time processing of data. From simple caching use cases to real time analytics, Memorystore for Redis provides the performance you need.

Caching: Cache is an integral part of modern application architectures. Memorystore for Redis provides low latency access and high throughput for heavily accessed data, compared to accessing the data from a disk based backend store. Session management, frequently accessed queries, scripts, and pages are common examples of caching.

https://cloud.google.com/memorystore/docs/redis/redis-overview

A is the correct answer as questions clearly mentioned it doesn't use CPU

Question 63

You are hosting an application on bare-metal（裸机） servers in your own data center. The application needs access to Cloud Storage. However, security policies prevent the servers hosting the application from having public IP addresses or access to the internet. You want to follow Google-recommended practices to provide the application with access to Cloud Storage. What should you do?

A. 1. Use nslookup to get the IP address for storage.googleapis.com. 2. Negotiate with the security team to be able to give a public IP address to the servers. 3. Only allow egress traffic from those servers to the IP addresses for storage.googleapis.com.

B. 1. Using Cloud VPN, create a VPN tunnel to a Virtual Private Cloud (VPC) in Google Cloud. 2. In this VPC, create a Compute Engine instance and install the Squid proxy server on this instance. 3. Configure your servers to use that instance as a proxy to access Cloud Storage.

C. 1. Use Migrate for Compute Engine (formerly known as Velostrata) to migrate those servers to Compute Engine. 2. Create an internal load balancer (ILB) that uses storage.googleapis.com as backend. 3. Configure your new instances to use this ILB as proxy.

D. 1. Using Cloud VPN or Interconnect, create a tunnel to a VPC in Google Cloud. 2. Use Cloud Router to create a custom route advertisement for 199.36.153.4/30. Announce that network to your on-premises network through the VPN tunnel. 3. In your on-premises network, configure your DNS server to resolve *.googleapis.com as a CNAME to restricted.googleapis.com.

你正在自己的数据中心的裸机 server 上托管一个应用程序。该应用程序需要访问Cloud Storage。然而，安全策略阻止托管应用程序的 server 拥有公共IP地址或访问互联网。你想遵循谷歌推荐的做法，为应用程序提供对Cloud Storage的访问。你应该怎么做？

A. 1. 使用 nslookup 来获取 storage.googleapis.com 的 IP 地址。2. 与安全团队协商，以便能够给 server 提供一个公共IP地址。3. 只允许从这些 server 到 storage.googleapis.com 的IP地址的出口流量。

B. 1. 使用 Cloud VPN ，创建一个VPN隧道到 Google Cloud 的Virtual Private Cloud (VPC)。2. 在这个 VPC 中，创建一个 Compute Engine 实例，并在这个实例上安装 Squid 代理 server。3. 配置你的 server，将该实例作为代理访问Cloud Storage。

C. 1. 使用Migrate for Compute Engine（以前称为Velostrata），将这些 server 迁移到Compute Engine。2. 创建一个内部负载平衡器（ILB），使用storage.googleapis.com作为后端。3. 配置你的新实例以使用这个ILB作为代理。

D. 1. 使用 Cloud VPN 或互连，创建一个隧道到 Google Cloud 的一个VPC。2. 使用Cloud Router为199.36.153.4/30创建一个自定义路由广告。通过VPN隧道向你的企业内部网络公布该网络。3. 在你的企业内部网络中，配置你的DNS server，把 *.googleapis.com作为CNAME解析到restricted.googleapis.com。

正确答案：

D

参考：

anytime you see 199.36.153.4/30 thats is the right answer. thats the only way for Private into on-perm form cloud

Question 64

You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?

A. 1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic. 2. Call your application on Cloud Run from the Cloud Function for every message.

B. 1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run. 2. Create a Cloud Pub/Sub subscription for that topic. 3. Make your application pull messages from that subscription.

C. 1. Create a service account. 2. Give the Cloud Run Invoker role