Free practice · No sign-up required
15 questions with answer explanations. Choose an answer below to begin.
Which practice helps ensure that infrastructure changes are applied consistently across environments?
Implement infrastructure as code using Cloud Deployment Manager or Terraform
0/15 answered · Bookmark questions to review later. Focus the practice area to use keys 1–9 and Enter.
Learn by doing
Use official documentation and hands-on labs to work through topics you missed.
Terraform modules and infrastructure blueprints for advanced exploration of Google Cloud design. This is supporting engineering material, not an exam course.
Try it: Read one small VPC or service-account module. Draw the resources and permission boundaries it creates, and explain a least-privilege change without deploying an entire landing zone.
Reading the code is free. Deployment requires suitable permissions and can create billable infrastructure.
Official certification paths with exam-specific guides and preparation links for cloud roles.
Try it: Open the guide for your chosen role. For each weak domain, write one service-selection decision you cannot yet explain and find its product documentation.
Public certification information is free; training, labs, and exam registration may be paid.
Prefer to read at your own pace? Work through each question below, then open its answer to check your reasoning. You can link directly to a question or print this reference.
Which practice helps ensure that infrastructure changes are applied consistently across environments?
Infrastructure as Code
Manual configuration
Ad-hoc scripts
Local development only
Correct answer
Infrastructure as Code
Infrastructure as Code uses code to define and manage infrastructure, enabling repeatable and consistent deployments. This reduces configuration drift and supports reliable environment provisioning.
What is the primary benefit of using containers in application deployment?
Isolation and portability
Increased hardware requirements
Tighter coupling to the OS
Manual dependency management
Correct answer
Isolation and portability
Containers package application code and dependencies together, providing isolation and portability across environments. This simplifies movement between development, testing, and production.
Which service is commonly used to store and manage application configuration data securely?
Secret Manager
Cloud Storage public buckets
Local files
Hardcoded values in source code
Correct answer
Secret Manager
Secret Manager provides a secure way to store and access sensitive data such as API keys and database credentials. It integrates with other services to avoid exposing secrets in code or configuration files.
What is a key advantage of using a managed database service?
Automated backups and maintenance
No need for data modeling
Unlimited storage without planning
Elimination of all security concerns
Correct answer
Automated backups and maintenance
Managed database services handle routine tasks like backups, patching, and replication. This reduces operational overhead and helps ensure high availability.
Which practice improves application availability during planned maintenance?
Zonal redundancy
Single zone deployment
Disabling health checks
Manual instance restarts
Correct answer
Zonal redundancy
Zonal redundancy distributes instances across zones within a region, allowing traffic to shift if one zone undergoes maintenance or fails. This supports continuous availability.
What is the purpose of a CI/CD pipeline in DevOps?
Automate build, test, and deployment steps
Replace code reviews
Store long-term backups
Monitor end-user experience only
Correct answer
Automate build, test, and deployment steps
A CI/CD pipeline automates the steps from code commit to deployment, enabling faster and more reliable releases. It helps catch issues early through automated testing.
Which logging approach helps troubleshoot application errors effectively?
Structured logging with clear levels
Writing logs only to local disk
Using print statements without context
Disabling logs in production
Correct answer
Structured logging with clear levels
Structured logging with severity levels and context makes it easier to search and analyze logs. Centralized log management improves visibility into application behavior.
What does autoscaling help achieve in cloud environments?
Adjust capacity based on demand
Guarantee zero downtime for all errors
Eliminate the need for monitoring
Reduce the number of required developers
Correct answer
Adjust capacity based on demand
Autoscaling adjusts the number of running instances in response to load, optimizing cost and performance. It helps maintain service levels during traffic spikes.
Which network component improves security by filtering traffic?
Firewall rules
Unrestricted ingress
Default routes only
Disabling VPC flow logs
Correct answer
Firewall rules
Firewall rules control which traffic can reach your instances, reducing exposure to unwanted access. Proper rule design balances security and application requirements.
What is a benefit of using infrastructure monitoring tools?
Proactive detection of performance issues
Ignoring all alerts to reduce noise
Disabling metrics collection
Relying solely on user reports
Correct answer
Proactive detection of performance issues
Monitoring tools provide visibility into system health and performance trends. They help detect issues before they impact users and support capacity planning.
Which strategy reduces downtime during application updates?
Rolling updates
Updating all instances at once
Skipping health checks
Disabling load balancers
Correct answer
Updating all instances at once
Rolling updates replace instances incrementally, ensuring that the application remains available during the update process. This minimizes impact on end users.
What is a key consideration when designing for multi-region deployments?
Data residency and latency
Using a single zone for simplicity
Avoiding any form of replication
Ignoring compliance requirements
Correct answer
Data residency and latency
Multi-region deployments must account for data residency laws and latency to users in different locations. They also improve resilience and disaster recovery options.
Which practice helps ensure that only trusted code is deployed?
Code reviews and automated testing
Deploying without verification
Allowing unrestricted external contributions
Skipping documentation
Correct answer
Code reviews and automated testing
Code reviews and automated testing validate changes before deployment, reducing the risk of introducing bugs or security issues. This supports reliable and secure delivery.
What is a common use case for Cloud Functions?
Event-driven processing
Long-running batch jobs without optimization
Replacing all virtual machines
Storing large static files only
Correct answer
Event-driven processing
Cloud Functions run code in response to events such as storage changes or HTTP requests. They are ideal for lightweight, asynchronous tasks that do not require persistent servers.
Which action helps secure access to cloud resources?
Using least privilege IAM roles
Granting broad access to all users
Sharing service account keys publicly
Disabling audit logs
Correct answer
Using least privilege IAM roles
Applying least privilege ensures users and services have only the permissions needed for their tasks. This reduces the impact of compromised credentials and supports auditability.
Recall the answer before opening each card.
Infrastructure as Code (IaC) using Cloud Deployment Manager or Terraform ensures repeatable and consistent deployments, reducing drift and enabling version control.
Containers provide isolation and portability, packaging code with dependencies to simplify movement between development, testing, and production.
Secret Manager securely stores and manages sensitive data, integrating with other services to avoid exposing secrets in code or configuration.
Managed databases automate backups, patching, and replication, reducing operational overhead and ensuring high availability.
Zonal redundancy distributes instances across multiple zones within a region, allowing traffic to shift during maintenance or failure, ensuring continuous availability.
A CI/CD pipeline automates build, test, and deployment steps, enabling faster and more reliable releases with automated testing to catch issues early.
Structured logging with clear severity levels and context makes logs searchable and analyzable, improving visibility into application behavior.
Autoscaling adjusts the number of running instances based on demand, optimizing cost and performance by maintaining service levels during traffic spikes.
Firewall rules control inbound and outbound traffic to instances, reducing exposure to unwanted access and balancing security with application needs.
Monitoring tools provide proactive detection of performance issues and trends, helping to prevent user impact and support capacity planning.
Rolling updates replace instances incrementally, ensuring the application remains available throughout the update process.
Multi-region deployments must account for data residency laws and latency to users in different locations, while improving resilience and disaster recovery.
Code reviews and automated testing validate changes before deployment, reducing bugs and security risks for reliable delivery.
Cloud Functions are used for event-driven processing, running code in response to events like storage changes or HTTP requests without persistent servers.
Using least privilege IAM roles grants only necessary permissions, reducing attack surface and supporting auditability.
Cloud Deployment Manager and Terraform are tools for defining infrastructure as code, enabling repeatable provisioning.
Cloud Logging centralizes logs with structured formats and severity levels, allowing efficient search and analysis for debugging.
A rolling update replaces instances incrementally, ensuring the application remains available throughout the update.
Automated backups in managed databases reduce operational overhead and help ensure data durability and recovery.
VPC Service Controls help mitigate data exfiltration risks by defining security perimeters around Google Cloud resources.
Read the prompt, commit to an answer, then flip the card. Move through the deck at your own pace and repeat any topic that does not come back quickly.
Card 1 of 20
1 reviewed this session
Connect the concepts
Open a branch to connect a topic with its practice questions and explanations. Use the map to choose your next review topic.
This is an analysis of the practice bank, not a claim about the vendor's live exam blueprint. Use it to identify the knowledge, judgment, and recall patterns exercised here, then verify your coverage against the current official exam guide.
This section focuses on automating and managing cloud infrastructure reliably. Key decisions include adopting Infrastructure as Code using Cloud Deployment Manager or Terraform to ensure consistent environments and reduce drift. Managed databases offload backups and maintenance, while autoscaling adjusts capacity dynamically to meet demand. Multi-region deployments require balancing latency and data residency.
Deploying applications efficiently requires containerization for isolation and portability, ideally on Google Kubernetes Engine. CI/CD pipelines with Cloud Build automate build, test, and deployment steps. Rolling updates replace instances gradually to avoid downtime. Cloud Functions enable event-driven processing for lightweight tasks.
Securing cloud resources involves multiple layers. IAM with least privilege grants only necessary permissions. Firewall rules control traffic to instances. Code reviews and automated testing catch vulnerabilities early. Secret Manager securely stores sensitive data like API keys, avoiding exposure in code.
Effective monitoring and logging are critical for reliability. Cloud Monitoring provides visibility into system performance for proactive issue detection. Structured logging with clear severity levels in Cloud Logging aids troubleshooting. Zonal redundancy ensures availability during planned maintenance by distributing instances across zones.
Study workflow
Start by writing declarative configurations using Cloud Deployment Manager or Terraform to define your cloud resources (VMs, networks, databases). Store templates in version control and apply them consistently across environments to achieve repeatable and reliable deployments.
Set up a continuous integration and delivery pipeline using Cloud Build. Automate building, testing, and deploying your application on each code commit. Use unit and integration tests to catch issues early, and incorporate security scanning to ensure only trusted code is deployed.
Enable Cloud Monitoring for your resources and define custom metrics and alerts. Use Cloud Logging with structured logs to capture application events. Set up dashboards to visualize health and performance, and configure alerts to proactively respond to anomalies.
Review and assign IAM roles based on the principle of least privilege. Grant only the permissions necessary for each user or service account. Use predefined roles where possible and regularly audit permissions to minimize security risks.
Distribute your application across multiple zones within a region using zonal redundancy. Configure autoscaling to handle traffic spikes. For critical services, consider a multi-region deployment with load balancing and failover to ensure continuous availability.
FAQ
Clear boundaries on what the bank covers, how to use it, and where official vendor information still matters.
IaC enables consistent and repeatable infrastructure provisioning using tools like Cloud Deployment Manager or Terraform. It reduces configuration drift, simplifies environment replication, and supports version control for infrastructure templates.
Cloud Build is a managed CI/CD service that automatically builds, tests, and deploys applications. It integrates with Cloud Source Repositories, GitHub, and other version control systems to trigger workflows on code changes, accelerating release cycles.
Secret Manager securely stores sensitive data like API keys and database passwords. It provides access control, auditing, and rotation capabilities, preventing secrets from being hardcoded in code or configuration files.
Rolling updates incrementally replace old instances with new ones, ensuring the application remains available throughout. This strategy is commonly used with Kubernetes deployments or managed instance groups.
Cloud Monitoring collects metrics, logs, and traces from your infrastructure. It provides dashboards and alerting to detect performance issues proactively, enabling rapid response to potential outages or degradation.
Browse another free bank or use the study strategy guide to turn your misses into spaced review.
