GCP Associate Cloud Engineer Practice Question

Your organization manages hundreds of projects across several folders. Security wants an on-demand, organization-wide list of Compute Engine VMs that still have external IP addresses and the ability to ask Gemini Cloud Assist for a quick summary of the non-compliant resources. As an Associate Cloud Engineer, which initial setup best meets this requirement while keeping operational effort low?

Enable VPC Flow Logs for every subnet and export the logs to Log Analytics in BigQuery, then use Gemini Cloud Assist to interpret the log data.
Schedule a Cloud Function that runs gcloud compute instances list across all projects, writes the JSON output to Cloud Storage, and have Gemini Cloud Assist read the files for a summary.
Turn on detailed billing export to BigQuery and rely on Gemini Cloud Assist to detect external IP usage by analyzing SKU charges.
Enable Cloud Asset Inventory at the organization level and configure a BigQuery export feed; query the resulting table and let Gemini Cloud Assist summarize the findings.

Report Issue

Answer Description

Cloud Asset Inventory can capture an organization-level snapshot of every Google Cloud resource and write the metadata directly into a BigQuery table through an export or feed. Once the data is in BigQuery, analysts can run a single SQL statement that filters compute.googleapis.com/Instance assets whose networkInterfaces.accessConfigs.natIP field is set. Gemini Cloud Assist is designed to work with Cloud Asset Inventory data and can answer natural-language prompts or generate summaries based on the same BigQuery table. Exporting VPC Flow Logs (option B) or billing data (option C) would not reliably list current external IP assignments, and maintaining a custom Cloud Function crawler (option D) adds unnecessary operational overhead and still lacks the tight integration with Gemini Cloud Assist. Therefore, creating a Cloud Asset Inventory export or feed to BigQuery is the most efficient and scalable solution.

Ask Bash

Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.