Option 2 is the correct answer. CloudSQL uses block storage. Persistent storage on a block device is required as the storage destination for relational database data, and RDBMS is deployed by storing that data. Block storage is storage that can be used in the same way as a general hard disk. Similar to the hard disk installed in a PC, it can be occupied and used by a specific server.

Option 1 is incorrect. Object storage does not provide storage for databases because it does not provide data blocks or file system storage. Object storage is used for medium- to long-term storage of data such as Cloud Storage.

Option 3 is incorrect. File storage is used as storage for sharing file areas or for storage areas when performing high-speed data processing. It is not used for relational database storage.

Option 4 is incorrect. There is no storage type called disk storage. The disk used for storage is block storage.

Option 2 is the correct answer. The permissions required to create a Datastore backup are Cloud Datastore Import Export Admin role. This gives you the two permissions you need to create a backup. This allows you to assign the user account an IAM role that grants datastore.databases.export permission (if you want to export data) or datastore.databases.import permission (if you want to import data).

Option 1 is incorrect. Datastore Admin grants general administrative privileges. This is too privileged and violates the principle of least privilege.

Option 3 is incorrect. No such authority exists.

Option 4 is incorrect. Datastore Index Admin is a permission to create a data index, and the permission target is different.

【reference】

https://cloud.google.com/datastore/docs/export-import-entities?hl=ja%3F

Option 4 is the correct answer. You can create a cluster based on two nodes with the command gcloud beta container clusters create udemy-cluster --num-nodes = 2. Use the gcloud beta container clusters create [cluster name] command to create a cluster with this name. You can set the number of nodes with the additional command'--num-nodes = 2'.

Option 1 is incorrect. gcloud create container clusters name udemy-cluster --num-nodes : 2 is not a valid command. Must be gcloud beta container clusters create udemy-cluster. Also, in the node settings, add --num-nodes = 2 and the command.

Option 2 is incorrect. In the node settings, add --num-nodes = 2 and the command.

Option 3 is incorrect. gcloud create container clusters name udemy-cluster --num-nodes : 2 is not a valid command. Must be gcloud beta container clusters create udemy-cluster.

【reference】

https://cloud.google.com/sdk/gcloud/reference/beta/container/clusters/create

Option 4 is the correct answer. If you cannot connect to the Internet or SSH to a Linux instance that has an external IP address, the main reasons are as follows.

-The instance is stopped.

-SSH communication is not permitted in the firewall settings.

-The IP address of the connection destination is incorrect.

-The key pair or path used for connection is incorrect.

Option 1 is incorrect. The Linux instance is incorrect because it supports SSH communication.

Option 2 is the correct answer. The type of disk and the availability of SSH connection are irrelevant.

Option 3 is incorrect. There is no setting method called instance communication setting.

Option 1 is the correct answer. A CNAME record is a record that defines an alias for a domain name or host name defined in DNS. Map the alias name as canonical name information to the CNAME record.

CNAME records are typically used to map a subdomain, such as www or mail, to the domain that hosts the content of that subdomain. For example, you can use a CNAME record to map the web address www.example.com to the actual website in the domain example.com.

Options 2 and 4 are incorrect. AAAA records and A records store domain name-to-IP address mappings.

Option 3 is incorrect. An MX record is a resource record that indicates a domain's mail exchange server.

Option 2 is the correct answer. To read an object in a Cloud Storage bucket from a VM, both the scope assigned to the service account and the IAM role must allow operations for the read process to succeed. Therefore, in this case, the scope permission cannot be set and the read process from the VM cannot be executed. When you set up a new instance to run as a service account, the IAM role you assign to the service account specifies the access level for the service account.

If a service account does not have an IAM role, there are no API methods that you can run against the instance in that service account. In addition, the access scope of an instance defines the default OAuth scope for requests made using the gcloud tools and client libraries on that instance. As a result, access to API methods may be further restricted when authenticating with OAuth.

【reference】

https://cloud.google.com/compute/docs/access/service-accounts

Option 1 is the correct answer. image is not a basic component of Deployment Manager. Configuration with Deployment Manager describes all the resources needed for a single deployment. A configuration is a YAML-formatted file that lists the resources you create and their properties, respectively. A section is required and includes a list of resources to create here. Each resource you deploy with Deployment Manager must contain three components:

■ name

A user-defined string to identify the resource (my-vm, project-data-disk, the-test-network, etc.).

■ type

The type of resource to be deployed (compute.v1.instance, compute.v1.disk, and so on). Basic resource types are listed and described in Supported Resource Types.

■ properties

Resource type parameter. The value must match one of the resource type properties (for example, zone: asia-east1-a boot: true).

【reference】

https://cloud.google.com/deployment-manager/docs/fundamentals

Option 4 is the wrong element and so is the correct answer. You can specify conditions, notifications, and documents when you create an alert policy. The duration cannot be set.

Option 1 is the correct configuration element. The condition describes the resource to be monitored, the index of the resource, and the timing when the condition is satisfied. An alert policy requires at least one condition, but an alert policy can contain up to six conditions.

Option 2 is the correct setting element. Notifications lists whether you have configured this policy to notify you when an incident is opened and closed, or whether you have configured it to notify you only when an incident is opened. To change the notification behavior, edit the alert policy.

Option 3 is the correct setting element. "Document" can specify the document to be included in the notification.

【reference】

https://cloud.google.com/monitoring/alerts/using-alerting-ui

Option 4 is the correct answer because it is an incorrect billing factor. The cost of a Compute Engine VM is affected by server characteristics such as the number of virtual servers, the amount of memory, and the region in which the virtual machine runs, but the zone in which the server is installed does not affect the cost.

Option 1 is the correct billing factor. All ComputeEngine vCPUs, GPUs, and GB memories are charged for at least one minute. For example, if you run a virtual machine for 30 seconds, you will be charged for 1 minute. After the first minute, your instance will be charged per second.

Option 2 is the correct billing factor. For example, VM generic machine types have predefined machine types and custom machine types available in each region. The predefined machine types have preset vCPU numbers and memory capacities, while custom machine types are billed according to resource-based pricing.

Option 3 is the correct billing factor. VMs are priced differently depending on the region, so the region you deploy determines the price.

【reference】

https://cloud.google.com/compute/vm-instance-pricing

Option 1 is the correct answer. The correct command to use when setting the scope of a virtual server is gcloud compute instances set-service-account. Gcloud compute instances are commands for reading and manipulating ComputeEngine virtual machine instances. Set the Compute Engine service account and access scope by using gcloud compute instances set-service-account.

Option 2 is incorrect. gcloud compute instances add-access-config creates a ComputeEngine virtual machine access configuration. It does not include access scope.

Option 3 is incorrect. gcloud compute instances get-iam-policy gets the IAM policy for your Compute Engine instance.

Option 4 is incorrect. gcloud compute instances create creates ComputeEngine virtual machine instances.

【reference】

https://cloud.google.com/sdk/gcloud/reference/compute/instances/set-service-account