[Oct 04, 2022] Free Google Associate-Cloud-Engineer Exam Questions and Answer
Verified Associate-Cloud-Engineer dumps Q&As Latest Associate-Cloud-Engineer Download
Below is a salary of Associate Cloud Engineer Certified Professional
- England: 54610.82 Pound
- India: 5092569.37 INR
- Europe: 64758.65 Euro
- United States: 71,399 USD
NEW QUESTION 83
You are building an application that stores relational data from users. Users across the globe will use this application. Your CTO is concerned about the scaling requirements because the size of the user base is unknown. You need to implement a database solution that can scale with your user growth with minimum configuration changes. Which storage solution should you use?
- A. Cloud Firestore
- B. Cloud Spanner
- C. Cloud SQL
- D. Cloud Datastore
Answer: D
NEW QUESTION 84
You create a new Google Kubernetes Engine (GKE) cluster and want to make sure that it always runs a supported and stable version of Kubernetes. What should you do?
- A. Enable the Node Auto-Repair feature for your GKE cluster.
- B. Select the latest available cluster version for your GKE cluster.
- C. Select "Container-Optimized OS (cos)" as a node image for your GKE cluster.
- D. Enable the Node Auto-Upgrades feature for your GKE cluster.
Answer: D
NEW QUESTION 85
Your company has a 3-tier solution running on Compute Engine. The configuration of the current infrastructure is shown below.
Each tier has a service account that is associated with all instances within it. You need to enable communication on TCP port 8080 between tiers as follows:
- Instances in tier #1 must communicate with tier #2.
- Instances in tier #2 must communicate with tier #3.
What should you do?
- A. 1. Create an ingress firewall rule with the following settings:
Targets: all instances
Source filter: IP ranges (with the range set to 10.0.2.0/24)
Protocols: allow all
2. Create an ingress firewall rule with the following settings:
Targets: all instances
Source filter: IP ranges (with the range set to 10.0.1.0/24)
Protocols: allow all - B. 1. Create an ingress firewall rule with the following settings:
Targets: all instances with tier #2 service account
Source filter: all instances with tier #1 service account
Protocols: allow all
2. Create an ingress firewall rule with the following settings:
Targets: all instances with tier #3 service account
Source filter: all instances with tier #2 service account
Protocols: allow all - C. 1. Create an ingress firewall rule with the following settings:
Targets: all instances with tier #2 service account
Source filter: all instances with tier #1 service account
Protocols: allow TCP:8080
2. Create an ingress firewall rule with the following settings:
Targets: all instances with tier #3 service account
Source filter: all instances with tier #2 service account
Protocols: allow TCP: 8080 - D. 1. Create an egress firewall rule with the following settings:
Targets: all instances
Source filter: IP ranges (with the range set to 10.0.2.0/24)
Protocols: allow TCP: 8080
2. Create an egress firewall rule with the following settings:
Targets: all instances
Source filter: IP ranges (with the range set to 10.0.1.0/24)
Protocols: allow TCP: 8080
Answer: C
NEW QUESTION 86
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task.
You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. When creating the VM, use Intel Skylake as the CPU platform.
- B. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
- C. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have 96 vCPUs.
- D. When creating the VM, use machine type n1-standard-96.
Answer: C
NEW QUESTION 87
You are building an application that processes data files uploaded from thousands of suppliers. Your primary goals for the application are data security and the expiration of aged data. You need to design the application to:
* Restrict access so that suppliers can access only their own data.
* Give suppliers write access to data only for 30 minutes.
* Delete data that is over 45 days old.
You have a very short development cycle, and you need to make sure that the application requires minimal maintenance. Which two strategies should you use? (Choose two.)
- A. Develop a script that loops through all Cloud Storage buckets and deletes any buckets that are older than 45 days.
- B. Use signed URLs to allow suppliers limited time access to store their objects.
- C. Build a lifecycle policy to delete Cloud Storage objects after 45 days.
- D. Set up an SFTP server for your application, and create a separate user for each supplier.
- E. Build a Cloud function that triggers a timer of 45 days to delete objects that have expired.
Answer: A,C
NEW QUESTION 88
You created an instance of SQL Server 2017 on Compute Engine to test features in the new version. You want to connect to this instance using the fewest number of steps.
What should you do?
- A. Set a Windows password in the GCP Console. Verify that a firewall rule for port 22 exists.
Click the RDP button in the GCP Console and supply the credentials to log in. - B. Set a Windows username and password in the GCP Console. Verify that a firewall rule for port
3389 exists.
Click the RDP button in the GCP Console, and supply the credentials to log in. - C. Install a RDP client in your desktop. Set a Windows username and password in the GCP Console.
Use the credentials to log in to the instance. - D. Install a RDP client on your desktop. Verify that a firewall rule for port 3389 exists.
Answer: B
Explanation:
Option D is easier as long there is no need to install RDP client as per google docs.
https://cloud.google.com/compute/docs/instances/connecting-to-instance#windows_gui From Google documentation "Before you connect using the Microsoft Remote Desktop Connection app, make sure that one of the following prerequisites is met:
Your VM instance has a public IP address and your firewall rules allow TCP ingress traffic from your client's public IP address to the instance by using port 3389.
Your local network is connected to your VPC by using VPN or Cloud Interconnect and your firewall rules allow TCP ingress traffic from your client's private IP address to the instance by using port 3389."
https://cloud.google.com/compute/docs/instances/connecting-toinstance#remote-desktop- connection-app
NEW QUESTION 89
You need to create an autoscaling managed instance group for an HTTPS web application. You want to make sure that unhealthy VMs are recreated. What should you do?
- A. In the Instance Template, add the label 'health-check'.
- B. Select Multi-Zone instead of Single-Zone when creating the Managed Instance Group.
- C. Create a health check on port 443 and use that when creating the Managed Instance Group.
- D. In the Instance Template, add a startup script that sends a heartbeat to the metadata server.
Answer: A
NEW QUESTION 90
You have an application on a general-purpose Compute Engine instance that is experiencing excessive disk read throttling on its Zonal SSD Persistent Disk. The application primarily reads large files from disk. The disk size is currently 350 GB. You want to provide the maximum amount of throughput while minimizing costs.
What should you do?
- A. Migrate to use a Regional SSD on the instance.
- B. Increase the allocated CPU to the instance.
- C. Increase the size of the disk to 1 TB.
- D. Migrate to use a Local SSD on the instance.
Answer: D
NEW QUESTION 91
Your organization has user identities in Active Directory. Your organization wants to use Active Directory as their source of truth for identities. Your organization wants to have full control over the Google accounts used by employees for all Google services, including your Google Cloud Platform (GCP) organization. What should you do?
- A. Use the cloud Identity APIs and write a script to synchronize users to Cloud Identity.
- B. Export users from Active Directory as a CSV and import them to Cloud Identity via the Admin Console.
- C. Use Google Cloud Directory Sync (GCDS) to synchronize users into Cloud Identity.
- D. Ask each employee to create a Google account using self signup. Require that each employee use their company email address and password.
Answer: C
Explanation:
Reference:
https://cloud.google.com/solutions/federating-gcp-with-active-directory-introduction
NEW QUESTION 92
Your organization uses G Suite for communication and collaboration. All users in your organization have a G Suite account. You want to grant some G Suite users access to your Cloud Platform project. What should you do?
- A. Grant them the required IAM roles using their G Suite email address.
- B. Create a CSV sheet with all users' email addresses. Use the gcloud command line tool to convert them into Google Cloud Platform accounts.
- C. In the G Suite console, add the users to a special group called cloud-console- [email protected]. Rely on the default behavior of the Cloud Platform to grant users access if they are members of this group.
- D. Enable Cloud Identity in the GCP Console for your domain.
Answer: A
Explanation:
https://cloud.google.com/resource-manager/docs/creating-managing-organization
NEW QUESTION 93
Your auditor wants to view your organization's use of data in Google Cloud. The auditor is most interested in auditing who accessed data in Cloud Storage buckets. You need to help the auditor access the data they need. What should you do?
- A. Assign the appropriate permissions, and then create a Data Studio report on Admin Activity Audit Logs.
- B. Assign the appropriate permissions, and the use Cloud Monitoring to review metrics.
- C. Use the export logs API to provide the Admin Activity Audit Logs in the format they want.
- D. Turn on Data Access Logs for the buckets they want to audit, and then build a query in the log viewer that filters on Cloud Storage.
Answer: C
Explanation:
https://cloud.google.com/storage/docs/audit-logging
NEW QUESTION 94
You want to configure autohealing for network load balancing for a group of Compute Engine instances that run in multiple zones, using the fewest possible steps. You need to configure re-creation of VMs if they are unresponsive after 3 attempts of 10 seconds each. What should you do?
- A. Create a managed instance group. Set the Autohealing health check to healthy (HTTP)
- B. Create a managed instance group. Verify that the autoscaling setting is on.
- C. Create an HTTP load balancer with a backend configuration that references an existing instance group. Set the health check to healthy (HTTP)
- D. Create an HTTP load balancer with a backend configuration that references an existing instance group. Define a balancing mode and set the maximum RPS to 10.
Answer: B
NEW QUESTION 95
You're in charge of setting up a Stackdriver account to monitor 3 separate projects. Which of the following is a Google best practice?
- A. Use the existing project with the most resources as the host project for the Stackdriver account.
- B. Create a new, empty project to use as the host project for the Stackdriver account.
- C. Use the existing project with the least resources as the host project for the Stackdriver account.
- D. Use one of the existing projects as the host project for the Stackdriver account.
Answer: A,B
NEW QUESTION 96
You are deploying an application to a Compute Engine VM in a managed instance group. The application must be running at all times, but only a single instance of the VM should run per GCP project. How should you configure the instance group?
- A. Set autoscaling to On, set the minimum number of instances to 1, and then set the maximum number of instances to 1.
- B. Set autoscaling to On, set the minimum number of instances to 1, and then set the maximum number of instances to 2.
- C. Set autoscaling to Off, set the minimum number of instances to 1, and then set the maximum number of instances to 2.
- D. Set autoscaling to Off, set the minimum number of instances to 1, and then set the maximum number of instances to 1.
Answer: A
NEW QUESTION 97
You want to deploy an application on Cloud Run that processes messages from a Cloud Pub/Sub topic. You want to follow Google-recommended practices. What should you do?
- A. 1. Deploy your application on Cloud Run on GKE with the connectivity set to Internal.2. Create a Cloud Pub/Sub subscription for that topic.3. In the same Google Kubernetes Engine cluster as your application, deploy a container that takes the messages and sends them to your application.
- B. 1. Grant the Pub/Sub Subscriber role to the service account used by Cloud Run.2. Create a Cloud Pub/Sub subscription for that topic.3. Make your application pull messages from that subscription.
- C. 1. Create a service account.2. Give the Cloud Run Invoker role to that service account for your Cloud Run application.3. Create a Cloud Pub/Sub subscription that uses that service account and uses your Cloud Run application as the push endpoint.
- D. 1. Create a Cloud Function that uses a Cloud Pub/Sub trigger on that topic.2. Call your application on Cloud Run from the Cloud Function for every message.
Answer: A
NEW QUESTION 98
......
Google Associate Cloud Engineer Exam
An associated cloud engineer distributes applications, monitors operations and manages business solutions. This person can use the Google Cloud Console and the command-line interface to perform common platform-based activities to maintain one or more distributed solutions that take advantage of services managed or self-managed by Google in Google Cloud
The Google Cloud Certification Program offers Google Cloud users, customers and partners a way to demonstrate their technical skills in a specific role or technology. People are evaluated using a variety of rigorously developed standard methods to determine if they meet Google Cloud competition standards. The cost of certification exams varies. if you do not pass an exam, you can repeat it after 14 days. If you do not take it a second time, you must wait 60 days before you can take it a third time. If it fails a third time, you must wait a year before resuming it. You can try the test in several languages, but each attempt, regardless of language, counts the total number of attempts allowed and the waiting period between attempts remains valid. Payment is required each time an exam is taken. Avoiding this recovery policy by registering with a different name or any other means constitutes a violation of the terms and conditions of the exam and will result in the denial or revocation of a certification. Exams are designed to determine only if a person meets a minimum standard of approval or not. They are not meant to be diagnostic or spread people on a capacity scale. For this reason, numerical scores are not significant for the candidate and can be misunderstood. Google Cloud Certification Program recognizes that some other exam providers provide section comments on their exams. Google doesn't do it because it makes no sense and could be misleading. Google Cloud Certification tests are not designed to diagnose strengths and weaknesses. Google Cloud Certification exam sections are very broad categories of topics, and the range of specific questions that can be received for each section in a single exam session is extremely small in comparison. Based on such a small amount of data, there are no significant comments at the section level that we can provide responsibly. We follow the procedures accepted by the industry to ensure that our exams are valid and accurate. Our exam development process includes the following steps: A task analysis (JTA) is a formal study that begins with the identification of role representatives, technology experts and stakeholders. These experts are interviewed and interviewed in a seminar to obtain information about what people do in a particular job or role and what skills distinguish the skills. These skills are defined in the exam guides that we write on the web. Our question authors are subject matter experts who worked in the certified role. The question editors are trained in the exam standards and conventions that we apply to our exams. All questions are examined to determine if they meet the standards and are technically accurate. Once the questions have passed all warnings and approvals, they are published in a beta test. The purpose of the beta exam is to collect performance statistics related to the exam questions to determine which ones are the most effective. We review the statistics and comments on the questions and eliminate questions that do not meet our standards. The minimum score for each exam is reserved. It is determined by a group of internal and external experts in the field, following a process of setting standards accepted by the sector. The minimum score applies equally to all candidates. It is reevaluated when changes are made to the content of the exam. The delivery method for an exam depends on its format.
Use Real Dumps - 100% Free Associate-Cloud-Engineer Exam Dumps: https://www.dumpsvalid.com/Associate-Cloud-Engineer-still-valid-exam.html
Updated 100% Cover Real Associate-Cloud-Engineer Exam Questions - 100% Pass Guarantee: https://drive.google.com/open?id=11bfsurULG3b4QNktbXMJFgvRYRMAlKZz