Free Google Cloud Architect Actual Exam Questions - Question 13 Discussion
constraints. The operations team needs to be immediately notified when any
container in the production cluster experiences an Out-of-Memory (OOM) error or
high CPU utilization. Which set of tools should be configured for effective
monitoring and alerting?
Makes sense that D is the go-to for alerting on OOM and CPU, easy to automate. D
D, since Cloud Monitoring alerts can be set up directly from logs for OOM and CPU spikes.
Maybe C is better because a custom Stackdriver agent can provide detailed container metrics and logs, which helps spot OOM or CPU issues quickly without manual checks.
D imo, using Cloud Source Repositories feels off here because it’s mainly for code, not general file storage like installation packages. Also, gsutil is designed for Cloud Storage, not Cloud Source Repos, so that part doesn’t add up. Setting up Private Google Access as in A makes more sense since it allows VMs without public IPs to reach Cloud Storage directly. B and D's firewall tricks seem complicated and unreliable. So, A looks cleaner and aligns better with how these services work in a locked-down environment.
Maybe B makes less sense since firewall rules can’t easily restrict access just to Cloud Storage IPs. That seems tricky and not reliable for securing a VM with no public IP.
Option A looks solid since Private Google Access specifically allows VMs without external IPs to access Google APIs and services like Cloud Storage. Using gsutil fits well here for downloading the files. Cloud Source Repositories seem less suited for storing installation files, and using gcloud for downloads isn’t typical. Also, relying on firewall rules to restrict access to Cloud Storage IPs (options B and D) might get complicated and less secure, especially when Private Google Access is designed exactly for this use case. So, A feels like the cleanest and most secure approach given the cons
This looks like A because Private Google Access allows VMs without external IPs to reach Google services like Cloud Storage safely.