Configuration properties in GCP - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ Configuration

intermediate

Identify the correct GCP configuration for enabling Stackdriver logging on a Compute Engine VM

You want to enable Stackdriver logging on a Google Compute Engine VM instance using the metadata server. Which configuration property must be set correctly?

A Set the metadata key 'enable-stackdriver-logging' to 'true' on the VM instance

B Set the metadata key 'google-logging-enabled' to 'TRUE' on the VM instance

C Set the metadata key 'logging.googleapis.com/enable' to 'true' on the VM instance

D Set the metadata key 'enable-oslogin' to 'TRUE' on the VM instance

💡 Hint

Think about the exact metadata key that controls Stackdriver logging on VM instances.

The correct metadata key to enable Stackdriver logging on a Compute Engine VM is 'logging.googleapis.com/enable' set to 'true'. Other keys control different features.

❓ Architecture

intermediate

Choose the correct configuration to restrict Cloud Storage bucket access to a specific VPC network

You want to configure a Cloud Storage bucket so that only resources inside a specific VPC network can access it. Which configuration property should you use?

A Enable the bucket's 'publicAccessPrevention' property to 'enforced'

B Configure a VPC Service Controls perimeter including the bucket and the VPC network

C Set the bucket's IAM policy to include the VPC network as a member

D Set the bucket's 'networkConfig' property to the VPC network's name

💡 Hint

Think about how Google Cloud restricts access between services and networks.

VPC Service Controls allow you to create a security perimeter around resources like Cloud Storage buckets and restrict access to specific VPC networks.

❓ security

advanced

Determine the effect of setting 'publicAccessPrevention' to 'enforced' on a Cloud Storage bucket

What is the result of setting the 'publicAccessPrevention' property to 'enforced' on a Cloud Storage bucket?

A The bucket allows public access only if the 'allUsers' member is added to IAM

B Only users with the 'Storage Object Viewer' role can access the bucket publicly

C The bucket becomes publicly accessible to anyone on the internet

D All public access to the bucket is blocked regardless of IAM policies

💡 Hint

Consider what 'publicAccessPrevention' means for public permissions.

Setting 'publicAccessPrevention' to 'enforced' blocks all public access to the bucket, ignoring any IAM policies that would otherwise allow public access.

❓ service_behavior

advanced

Predict the behavior when setting 'autoscalingPolicy' minInstances higher than maxInstances in Cloud Run

In Cloud Run, what happens if you configure the autoscaling policy with 'minInstances' set to 5 and 'maxInstances' set to 3?

A Cloud Run will throw a configuration error and reject the deployment

B Cloud Run will set both 'minInstances' and 'maxInstances' to 5 automatically

C Cloud Run will autoscale between 3 and 5 instances dynamically

D Cloud Run will ignore the 'minInstances' and use 'maxInstances' as 3

💡 Hint

Think about valid ranges for autoscaling configuration.

Cloud Run requires 'minInstances' to be less than or equal to 'maxInstances'. Setting 'minInstances' higher than 'maxInstances' causes a configuration error and deployment rejection.

✅ Best Practice

expert

Select the best configuration property to enforce encryption with customer-managed keys (CMEK) on all BigQuery datasets in a project

You want to enforce that all BigQuery datasets in your project use customer-managed encryption keys (CMEK) by default. Which configuration approach achieves this best?

A Enable CMEK enforcement via an Organization Policy constraint for BigQuery datasets

B Set the project-level default encryption key property to the CMEK key resource name

C Manually specify the CMEK key in each dataset's encryption configuration

D Configure a Cloud IAM role that requires CMEK usage on BigQuery datasets

💡 Hint

Consider how to enforce policies across all datasets automatically.

Using an Organization Policy constraint to enforce CMEK on BigQuery datasets ensures all datasets comply by default without manual configuration per dataset.