Google Professional Cloud Database Engineer Question 256
Single answerGoogle Cloud PlatformYou are responsible for automating the provisioning of database instances on Google Cloud for your organization. The database instances must be created with specific configurations for CPU, memory, and storage, and should automatically apply security policies during provisioning. Which approach should you use to achieve this?
- A
Use Deployment Manager templates with a YAML configuration file to define the database instance specifications and apply security policies.
- B
Manually create the database instances using the Google Cloud Console and apply security policies via the Console UI.
- C
Write a Python script to call the Cloud SQL Admin API for instance creation and manually apply security policies afterward.
- D
Use Terraform to define the database instance configurations and integrate it with a security automation tool to enforce policies.
Show answer and explanation
Correct answer: A
Explanation
To automate database instance provisioning on Google Cloud, you should use a tool that supports Infrastructure as Code (IaC). Deployment Manager is Google's native IaC tool, which allows you to define resource configurations in YAML or Python files. This approach ensures that database instances are provisioned automatically with the required configurations and security policies, meeting the requirements specified in the question.
- A. Correct.
Deployment Manager allows you to use YAML or Python configuration files to define and automate the creation of Google Cloud resources, including database instances, with specific configurations. Security policies can also be applied during the provisioning process.
- B. Incorrect.
Manually creating database instances through the Cloud Console does not automate the provisioning process. Additionally, applying security policies manually introduces human error and is not scalable.
- C. Incorrect.
While the Cloud SQL Admin API can be used for instance creation, manually applying security policies afterward does not fulfill the automation requirement and increases operational overhead.
- D. Incorrect.
Terraform is a valid Infrastructure as Code (IaC) tool for managing Google Cloud resources, but the question specifies using Deployment Manager, which is a native Google Cloud tool. Therefore, this option is incorrect in this context.