Authentic Best resources for Associate-Cloud-Engineer Test Engine Practice Exam
[2021] Associate-Cloud-Engineer PDF Questions - Perfect Prospect To Go With DumpsValid Practice Exam
NEW QUESTION 126
You built an application on your development laptop that uses Google Cloud services. Your application uses Application Default Credentials for authentication and works fine on your development laptop. You want to migrate this application to a Compute Engine virtual machine (VM) and set up authentication using Google- recommended practices and minimal changes. What should you do?
- A. Store credentials for service accounts with appropriate access for Google services in a config file, and deploy this config file with your application.
- B. Store credentials for your user account with appropriate access for Google services in a config file, and deploy this config file with your application.
- C. Create a service account with appropriate access for Google services, and configure the application to use this account.
- D. Assign appropriate access for Google services to the service account used by the Compute Engine VM.
Answer: C
NEW QUESTION 127
You want to send and consume Cloud Pub/Sub messages from your App Engine application. The Cloud Pub/Sub API is currently disabled. You will use a service account to authenticate your application to the API.
You want to make sure your application can use Cloud Pub/Sub. What should you do?
- A. Use Deployment Manager to deploy your application. Rely on the automatic enablement of all APIs used by the application being deployed.
- B. Enable the Cloud Pub/Sub API in the API Library on the GCP Console.
- C. Grant the App Engine Default service account the role of Cloud Pub/Sub Admin. Have your application enable the API on the first connection to Cloud Pub/Sub.
- D. Rely on the automatic enablement of the Cloud Pub/Sub API when the Service Account accesses it.
Answer: B
NEW QUESTION 128
You are given a project with a single virtual private cloud (VPC) and a single subnetwork in the us-central1 region. There is a Compute Engine instance hosting an application in this subnetwork. You need to deploy a new instance in the same project in the europe-west1 region. This new instance needs access to the application. You want to follow Google-recommended practices. What should you do?
- A. 1. Create a VPC and a subnetwork in europe-west1.2. Expose the application with an internal load balancer.3. Create the new instance in the new subnetwork and use the load balancer's address as the endpoint.
- B. 1. Create a subnetwork in the same VPC, in europe-west1.2. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
- C. 1. Create a VPC and a subnetwork in europe-west1.2. Peer the 2 VPCs.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
- D. 1. Create a subnetwork in the same VPC, in europe-west1.2. Use Cloud VPN to connect the two subnetworks.3. Create the new instance in the new subnetwork and use the first instance's private address as the endpoint.
Answer: B
NEW QUESTION 129
Your organization has three existing Google Cloud projects. You need to bill the Marketing department for only their Google Cloud services for a new initiative within their group. What should you do?
- A. 1.Verify that you ace assigned the Billing Administrator IAM role tor your organization's Google Cloud Project for the Marketing department
2.Link the new project to a Marketing Billing Account - B. 1.Verify that you are assigned the Billing Administrator IAM role for your organization's Google Cloud account
2.Create a new Google Cloud Project for the Marketing department
3.Set the default key-value project labels to department marketing for all services in this project - C. 1.Verity that you are assigned the Organization Administrator IAM role for your organization's Google Cloud account
2.Create a new Google Cloud Project for the Marketing department
3.Set the default key value project labels to department marketing for all services in this protect - D. 1.Verify that you are assigned the Organization Administrator IAM role for your organization's Google Cloud account
2.Create a new Google Cloud Project for the Marketing department
3. Link the new project to a Marketing Billing Account.
Answer: A
NEW QUESTION 130
You need to select and configure compute resources for a set of batch processing jobs. These jobs take around 2 hours to complete and are run nightly. You want to minimize service costs. What should you do?
- A. Select Google Kubernetes Engine. Use a three-node cluster with micro instance types.
- B. Select Compute Engine. Use VM instance types that support micro bursting.
- C. Select Google Kubernetes Engine. Use a single-node cluster with a small instance type.
- D. Select Compute Engine. Use preemptible VM instances of the appropriate standard machine type.
Answer: D
NEW QUESTION 131
You have deployed an application on a single Compute Engine instance. The application writes logs to disk.
Users start reporting errors with the application. You want to diagnose the problem. What should you do?
- A. Install and configure the Cloud Logging Agent and view the logs from Cloud Logging.
- B. Navigate to Cloud Logging and view the application logs.
- C. Connect to the instance's serial console and read the application logs.
- D. Configure a Health Check on the instance and set a Low Healthy Threshold value.
Answer: B
NEW QUESTION 132
You recently deployed a new version of an application to App Engine and then discovered a bug in the release.
You need to immediately revert to the prior version of the application. What should you do?
- A. On the App Engine Versions page of the GCP Console, route 100% of the traffic to the previous version.
- B. Deploy the original version as a separate application. Then go to App Engine settings and split traffic between applications so that the original version serves 100% of the requests.
- C. Run gcloud app restore.
- D. On the App Engine page of the GCP Console, select the application that needs to be reverted and click Revert.
Answer: B
NEW QUESTION 133
You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs. What should you do?
- A. Increase the allocated CPU to the instance.
- B. Increase the size of the disk to 1 TB.
- C. Migrate to use a Regional SSD on the instance.
- D. Migrate to use a Local SSD on the instance.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/compute/docs/disks/performance
NEW QUESTION 134
You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone. You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?
- A. In the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.
- B. Create a Metadata entry on the Compute Engine page with key compute/zone and value europe-west1-d.
- C. Set the europe-west1-d zone as the default zone using the gcloud config subcommand.
- D. In the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.
Answer: A
Explanation:
Explanation/Reference: https://cloud.google.com/compute/docs/gcloud-compute
NEW QUESTION 135
You host a static website on Cloud Storage. Recently, you began to include links to PDF files on this site. Currently, when users click on the links to these PDF files, their browsers prompt them to save the file onto their local system. Instead, you want the clicked PDF files to be displayed within the browser window directly, without prompting the user to save the file locally. What should you do?
- A. Add a label to the storage bucket with a key of Content-Type and value of application/pdf.
- B. Set Content-Type metadata to application/pdf on the PDF file objects.
- C. Enable 'Share publicly' on the PDF file objects.
- D. Enable Cloud CDN on the website frontend.
Answer: B
NEW QUESTION 136
You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?
- A. Reserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server.
- B. Start the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address.
- C. Reserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server.
- D. Use the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.
Answer: A
NEW QUESTION 137
You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices.
What should you do?
- A. Create a service account with an access scope.
Use the access scope `https://www.googleapis.com/ auth/cloud-platform'. - B. Create a service account and add it to the IAM role `storage.objectAdmin' for that bucket.
- C. Create a service account and add it to the IAM role `storage.objectCreator' for that bucket.
- D. Create a service account with an access scope.
Use the access scope `https://www.googleapis.com/ auth/devstorage.write_only'.
Answer: A
NEW QUESTION 138
You have a simple web application that you're trying to deploy in a secure and inexpensive way. The application is running inside a Docker container on port 8080. Once the application is initially deployed, the developers are going to take ownership of future deployments.
What is the best option for running the application?
- A. Use an on-premises Kubernetes cluster.
- B. Use Kubernetes Engine.
- C. Use an App Engine Standard Environment.
- D. Use an App Engine Flexible Environment.
Answer: D
NEW QUESTION 139
You are running an application on multiple virtual machines within a managed instance group and have autoscaling enabled. The autoscaling policy is configured so that additional instances are added to the group if the CPU utilization of instances goes above 80%. VMs are added until the instance group reaches its maximum limit of five VMs or until CPU utilization of instances lowers to 80%. The initial delay for HTTP health checks against the instances is set to 30 seconds. The virtual machine instances take around three minutes to become available for users. You observe that when the instance group autoscales, it adds more instances then necessary to support the levels of end-user traffic. You want to properly maintain instance group sizes when autoscaling.
What should you do?
- A. Decrease the maximum number of instances to 3.
- B. Use a TCP health check instead of an HTTP health check.
- C. Set the maximum number of instances to 1.
- D. Increase the initial delay of the HTTP health check to 200 seconds.
Answer: D
NEW QUESTION 140
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web- applications project. What should you do?
- A. Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.
- B. Give "project owner" role to crm-databases-proj and the web-applications project.
- C. Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web- applications.
- D. Give "project owner" for web-applications appropriate roles to crm-databases- proj
Answer: A
Explanation:
You just need read access for DB at the project.
NEW QUESTION 141
You have a Dockerfile that you need to deploy on Kubernetes Engine. What should you do?
- A. Create a docker image from the Dockerfile and upload it to Cloud Storage. Create a Deployment YAML file to point to that image. Use kubectl to create the deployment with that file.
- B. Use kubectl app deploy <dockerfilename>.
- C. Create a docker image from the Dockerfile and upload it to Container Registry. Create a Deployment YAML file to point to that image. Use kubectl to create the deployment with that file.
- D. Use gcloud app deploy <dockerfilename>.
Answer: C
Explanation:
Reference:
https://cloud.google.com/kubernetes-engine/docs/tutorials/hello-app
NEW QUESTION 142
You are assisting a new Google Cloud user who just installed the Google Cloud SDK on their VM.
The server needs access to Cloud Storage. The user wants your help to create a new storage bucket. You need to make this change in multiple environments. What should you do?
- A. Use a local SSD to improve performance of the VM for the targeted workload
- B. Use a Deployment Manager script to automate creating storage buckets in an appropriate region
- C. Use the gsutii command to create a storage bucket in the same region as the VM
- D. Use a Persistent Disk SSD in the same zone as the VM to improve performance of the VM
Answer: B
NEW QUESTION 143
Your company has hired a third-party analytics company to help find patterns in user dat
a. Your development team has generated a file containing only the data they've requested; which includes personally identifiable information.
What is the best way to share the data with the other company?
- A. Send the file through email.
- B. Create a new user for the company and grant them access to the original data source for them to query.
- C. Put the data on Cloud Storage in a public bucket and securely share the URL.
- D. Put the data on Cloud Storage and generate a signed URL that will expire in one hour, and securely share the URL.
Answer: A,D
NEW QUESTION 144
You have been hired as a contractor by one of the travel technology company who is planning to containerize their existing applications in such a way that they can perform a lift and shift very easily in future if they plan to move away from Google Cloud. Which service will best suit this case?
- A. CloudRun
- B. App Engine Standard
- C. Kubernetes Engine
- D. Cloud Function
Answer: C
NEW QUESTION 145
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?
- A. Enable the Node Auto-Upgrades feature for your GKE cluster.
- B. Select the latest available cluster version for your GKE cluster.
- C. Enable the Node Auto-Repair feature for your GKE cluster.
- D. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.
Answer: A
Explanation:
https://cloud.google.com/kubernetes-engine/versioning-and-upgrades
NEW QUESTION 146
You need to immediately change the storage class of an existing Google Cloud bucket.
You need to reduce service cost for infrequently accessed files stored in that bucket and for all files that will be added to that bucket in the future. What should you do?
- A. Use the gsutil to rewrite the storage class for the bucket.
Set up Object Lifecycle management on the bucket - B. Create a new bucket and change the default storage class for the bucket import the files from the previous bucket into the new bucket
- C. Use the gsutil to rewrite the storage class for the bucket.
Change the default storage class for the bucket - D. Create a new bucket and change the default storage class for the bucket.
Set up Object Lifecycle management on lite bucket
Answer: A
NEW QUESTION 147
You have production and test workloads that you want to deploy on Compute Engine. Production VMs need to be in a different subnet than the test VMs. All the VMs must be able to reach each other over internal IP without creating additional routes. You need to set up VPC and the 2 subnets. Which configuration meets these requirements?
- A. Create a single custom VPC with 2 subnets.
Create each subnet in the same region and with the same CIDR range. - B. Create 2 custom VPCs, each with a single subnet.
Create each subnet is a different region and with a different CIDR range. - C. Create a single custom VPC with 2 subnets.
Create each subnet in a different region and with a different CIDR range. - D. Create 2 custom VPCs, each with a single subnet.
Create each subnet in the same region and with the same CIDR range.
Answer: C
NEW QUESTION 148
......
Best updated resource for Associate-Cloud-Engineer Online Practice Exam: https://www.dumpsvalid.com/Associate-Cloud-Engineer-still-valid-exam.html
Realistic Practice Associate-Cloud-Engineer Google Associate Cloud Engineer Exam Exam Braindumps: https://drive.google.com/open?id=1BAvVMiiBcCka0rX_T6FIkdrX5T8oSKNG