[Mar-2024] Exam Sure Pass Google Certification with Associate-Cloud-Engineer exam questions
Real Google Associate-Cloud-Engineer Exam Questions Study Guide
Google Associate Cloud Engineer certification is a highly respected and in-demand certification offered by Google Cloud. It is designed for individuals who want to demonstrate their expertise in deploying applications, monitoring operations, and managing enterprise solutions on the Google Cloud Platform. Google Associate Cloud Engineer Exam certification is ideal for IT professionals, developers, and engineers who want to advance their careers and become Google Cloud experts.
NEW QUESTION # 54
You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?
- A. Deploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.
- B. Deploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.
- C. Deploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.
- D. Deploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.
Answer: B
Explanation:
Explanation
GCP App Engine natively offers traffic splitting functionality between versions. You can use traffic splitting to specify a percentage distribution of traffic across two or more of the versions within a service. Splitting traffic allows you to conduct A/B testing between your versions and provides control over the pace when rolling out features.
Ref: https://cloud.google.com/appengine/docs/standard/python/splitting-traffic
NEW QUESTION # 55
Several employees at your company have been creating projects with Cloud Platform and paying for it with their personal credit cards, which the company reimburses. The company wants to centralize all these projects under a single, new billing account. What should you do?
- A. In the Google Platform Console, go to the Resource Manage and move all projects to the root Organizarion.
- B. Create a ticket with Google Support and wait for their call to share your credit card details over the phone.
- C. Contact [email protected] with your bank account details and request a corporate billing account for your company.
- D. In the Google Cloud Platform Console, create a new billing account and set up a payment method.
Answer: D
Explanation:
Explanation/Reference: https://www.whizlabs.com/blog/google-cloud-interview-questions/
NEW QUESTION # 56
You have an application that looks for its licensing server on the IP 10.0.3.21. You need to deploy the licensing server on Compute Engine. You do not want to change the configuration of the application and want the application to be able to reach the licensing server. What should you do?
- A. Reserve the IP 10.0.3.21 as a static public IP address using gcloud and assign it to the licensing server.
- B. Reserve the IP 10.0.3.21 as a static internal IP address using gcloud and assign it to the licensing server.
- C. Use the IP 10.0.3.21 as a custom ephemeral IP address and assign it to the licensing server.
- D. Start the licensing server with an automatic ephemeral IP address, and then promote it to a static internal IP address.
Answer: B
Explanation:
Explanation
IP 10.0.3.21 is internal by default, and to ensure that it will be static non-changing it should be selected as static internal ip address.
NEW QUESTION # 57
You need to create a new billing account and then link it with an existing Google Cloud Platform project.
What should you do?
- A. Verify that you are Billing Administrator for the billing account.
Update the existing project to link it to the existing billing account. - B. Verify that you are Project Billing Manager for the GCP project.
Create a new billing account and link the new billing account to the existing project. - C. Verify that you are Billing Administrator for the billing account.
Create a new project and link the new project to the existing billing account. - D. Verify that you are Project Billing Manager for the GCP project.
Update the existing project to link it to the existing billing account.
Answer: C
NEW QUESTION # 58
You have one project called proj-sa where you manage all your service accounts. You want to be able to use a service account from this project to take snapshots of VMs running in another project called What should you do?
proj-vm.
- A. Download the private key from the service account, and add the private key to each VM's SSH keys.
- B. Download the private key from the service account, and add it to each VMs custom metadata.
- C. Grant the service account the IAM Role of Compute Storage Admin in the project called proj-vm.
- D. When creating the VMs, set the service account's API scope for Compute Engine to read/write.
Answer: C
Explanation:
You create the service account in proj-sa and take note of the service account email, then you go to proj-vm in IAM > ADD and add the service account's email as new member and give it the Compute Storage Admin role.
NEW QUESTION # 59
You keep attempting to execute a command, and while there's no error being thrown, you suspect something is going wrong. You want to check out the gcloud logs. However, you can't recall in which directory they're located. Your script skills are not what they could be, so you can't rely on using those fancy command line skills.
Which command could you run to show you where the log directory is located?
- A. gcloud info
- B. gcloud logging
- C. google logs
- D. gcloud
Answer: A
NEW QUESTION # 60
Your boss has asked you to onboard a new user and provide them with access to their team's project. What set of steps best describes what needs to happen?
- A. Add the user inside of G Suite, create a user group, and add them to that user group.
- B. Add them as a member of the project, grant them the required roles, and sync the user back to G Suite.
- C. Add the user inside of G Suite, add them as a member of the project, and grant them the required roles.
- D. Add the user inside of G Suite; sync from G Suite to the Active Directory using the Directory Sync util; add them as a member and grant them the required roles.
Answer: B,C
NEW QUESTION # 61
You are building a new version of an application hosted in an App Engine environment. You want to test the new version with 1% of users before you completely switch your application over to the new version. What should you do?
- A. Deploy a new version of your application in Google Kubernetes Engine instead of App Engine and then use GCP Console to split traffic.
- B. Deploy a new version of your application in App Engine. Then go to App Engine settings in GCP Console and split traffic between the current version and newly deployed versions accordingly.
- C. Deploy a new version as a separate app in App Engine. Then configure App Engine using GCP Console to split traffic between the two apps.
- D. Deploy a new version of your application in a Compute Engine instance instead of App Engine and then use GCP Console to split traffic.
Answer: B
NEW QUESTION # 62
You are configuring service accounts for an application that spans multiple projects. Virtual machines (VMs) running in the web-applications project need access to BigQuery datasets in crm-databases-proj. You want to follow Google-recommended practices to give access to the service account in the web- applications project. What should you do?
- A. Give "project owner" role to crm-databases-proj and the web-applications project.
- B. Give "project owner" role to crm-databases-proj and bigquery.dataViewer role to web- applications.
- C. Give "project owner" for web-applications appropriate roles to crm-databases- proj
- D. Give bigquery.dataViewer role to crm-databases-proj and appropriate roles to web-applications.
Answer: D
Explanation:
You just need read access for DB at the project.
NEW QUESTION # 63
You are managing several Google Cloud Platform (GCP) projects and need access to all logs for the past 60 days. You want to be able to explore and quickly analyze the log contents. You want to follow Google- recommended practices to obtain the combined logs for all projects. What should you do?
- A. Create a Stackdriver Logging Export with a Sink destination to a BigQuery dataset. Configure the table expiration to 60 days.
- B. Navigate to Stackdriver Logging and select resource.labels.project_id="*"
- C. Configure a Cloud Scheduler job to read from Stackdriver and store the logs in BigQuery. Configure the table expiration to 60 days.
- D. Create a Stackdriver Logging Export with a Sink destination to Cloud Storage. Create a lifecycle rule to delete objects after 60 days.
Answer: A
Explanation:
Explanation/Reference:
Reference: https://cloud.google.com/blog/products/gcp/best-practices-for-working-with-google-cloud-audit- logging
NEW QUESTION # 64
You need to produce a list of the enabled Google Cloud Platform APIs for a GCP project using the gcloud command line in the Cloud Shell. The project name is my-project. What should you do?
- A. Run gcloud infoto view the account value, and then run gcloud services list -- account <Account>.
- B. Run gcloud projects listto get the project ID, and then run gcloud services list -
-project <project ID>. - C. Run gcloud initto set the current project to my-project, and then run gcloud services list --available.
- D. Run gcloud projects describe <project ID>to verify the project value, and then run gcloud services list --available.
Answer: B
NEW QUESTION # 65
You want to run a single caching HTTP reverse proxy on GCP for a latency-sensitive website.
This specific reverse proxy consumes almost no CPU. You want to have a 30-GB in-memory cache, and need an additional 2 GB of memory for the rest of the processes. You want to minimize cost. How should you run this reverse proxy?
- A. Run it on Compute Engine, and choose a custom instance type with 6 vCPUs and 32 GB of memory.
- B. Create a Cloud Memorystore for Redis instance with 32-GB capacity.
- C. Run it on Compute Engine, choose the instance type n1-standard-1, and add an SSD persistent disk of 32 GB.
- D. Package it in a container image, and run it on Kubernetes Engine, using n1-standard-32 instances as nodes.
Answer: B
Explanation:
It will be all most the same price, but if you choose option B you are loosing 6 VCPU that doesn't do nothing.
NEW QUESTION # 66
You need to manage multiple Google Cloud Platform (GCP) projects in the fewest steps possible. You want to configure the Google Cloud SDK command line interface (CLI) so that you can easily manage multiple GCP projects. What should you?
- A. 1. Create a configuration for each project you need to manage.
2. Use gcloud init to update the configuration values when you need to work with a non-default project - B. 1. Use the default configuration for one project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned GCP projects. - C. 1. Create a configuration for each project you need to manage.
2. Activate the appropriate configuration when you work with each of your assigned GCP projects. - D. 1. Use the default configuration for one project you need to manage.
2. Use gcloud init to update the configuration values when you need to work with a non-default project.
Answer: C
Explanation:
Explanation
https://cloud.google.com/sdk/gcloud
https://cloud.google.com/sdk/docs/configurations#multiple_configurations
NEW QUESTION # 67
You are building an application that will run in your data center. The application will use Google Cloud Platform (GCP) services like AutoML. You created a service account that has appropriate access to AutoML. You need to enable authentication to the APIs from your on-premises environment. What should you do?
- A. Set up direct interconnect between your data center and Google Cloud Platform to enable authentication for your on-premises applications.
- B. Use service account credentials in your on-premises application.
- C. Go to the IAM & admin console, grant a user account permissions similar to the service account permissions, and use this user account for authentication from your data center.
- D. Use gcloudto create a key file for the service account that has appropriate permissions.
Answer: D
Explanation:
Explanation/Reference: https://cloud.google.com/vision/automl/docs/before-you-begin
NEW QUESTION # 68
Your finance team wants to view the billing report for your projects. You want to make sure that the finance team does not get additional permissions to the project. What should you do?
- A. Add the group for the finance team to roles/billing admin role.
- B. Add the group for the finance team to roles/billing project/Manager role.
- C. Add the group for the finance team to roles/billing user role.
- D. Add the group for the finance team to roles/billing viewer role.
Answer: D
Explanation:
"Billing Account Viewer access would usually be granted to finance teams, it provides access to spend information, but does not confer the right to link or unlink projects or otherwise manage the properties of the billing account." https://cloud.google.com/billing/docs/how-to/billing-access
NEW QUESTION # 69
You created several resources in multiple Google Cloud projects. All projects are linked to different billing accounts. To better estimate future charges, you want to have a single visual representation of all costs incurred. You want to include new cost data as soon as possible. What should you do?
- A. Fill all resources in the Pricing Calculator to get an estimate of the monthly cost.
- B. Visit the Cost Table page to get a CSV export and visualize it using Data Studio.
- C. Use the Reports view in the Cloud Billing Console to view the desired cost information.
- D. Configure Billing Data Export to BigQuery and visualize the data in Data Studio.
Answer: D
Explanation:
Explanation
https://cloud.google.com/billing/docs/how-to/export-data-bigquery "Cloud Billing export to BigQuery enables you to export detailed Google Cloud billing data (such as usage, cost estimates, and pricing data) automatically throughout the day to a BigQuery dataset that you specify."
NEW QUESTION # 70
A colleague handed over a Google Cloud Platform project for you to maintain. As part of a security checkup, you want to review who has been granted the Project Owner role. What should you do?
- A. Use the command gcloud projects get-iam-policy to view the current role assignments.
- B. In the console, validate which SSH keys have been stored as project-wide keys.
- C. Enable Audit Logs on the IAM & admin page for all resources, and validate the results.
- D. Navigate to Identity-Aware Proxy and check the permissions for these resources.
Answer: B
NEW QUESTION # 71
You have downloaded and installed the gcloud command line interface (CLI) and have authenticated with your Google Account. Most of your Compute Engine instances in your project run in the europe-west1-d zone. You want to avoid having to specify this zone with each CLI command when managing these instances. What should you do?
- A. In the Settings page for Compute Engine under Default location, set the zone to europe-west1-d.
- B. Create a Metadata entry on the Compute Engine page with key compute/zone and value europe-west1-d.
- C. Set the europe-west1-d zone as the default zone using the gcloud config subcommand.
- D. In the CLI installation directory, create a file called default.conf containing zone=europe-west1-d.
Answer: D
NEW QUESTION # 72
You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?
- A. Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Direct the auditor to also review the logs for changes to Cloud IAM policy.
- B. Assign the auditor the IAM role roles/logging.privateLogViewer. Perform the export of logs to Cloud Storage.
- C. Assign the auditor the IAM role roles/logging.privateLogViewer. Direct the auditor to also review the logs for changes to Cloud IAM policy.
- D. Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission. Perform the export of logs to Cloud Storage.
Answer: C
Explanation:
Google Cloud provides Cloud Audit Logs, which is an integral part of Cloud Logging. It consists of two log streams for each project: Admin Activity and Data Access, which are generated by Google Cloud services to help you answer the question of who did what, where, and when? within your Google Cloud projects.
Ref: https://cloud.google.com/iam/docs/job-functions/auditing#scenario_external_auditors
NEW QUESTION # 73
You have a number of compute instances belonging to an unmanaged instances group. You need to SSH to one of the Compute Engine instances to run an ad hoc script. You've already authenticated gcloud, however, you don't have an SSH key deployed yet. In the fewest steps possible, what's the easiest way to SSH to the instance?
- A. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.
- B. Use the gcloud compute ssh command.
- C. Create a key with the ssh-keygen command. Upload the key to the instance. Run gcloud compute instances list to get the IP address of the instance, then use the ssh command.
- D. Create a key with the ssh-keygen command. Then use the gcloud compute ssh command.
Answer: B
Explanation:
gcloud compute ssh ensures that the user's public SSH key is present in the project's metadata. If the user does not have a public SSH key, one is generated using ssh-keygen and added to the project's metadata. This is similar to the other option where we copy the key explicitly to the project's metadata but here it is done automatically for us. There are also security benefits with this approach. When we use gcloud compute ssh to connect to Linux instances, we are adding a layer of security by storing your host keys as guest attributes. Storing SSH host keys as guest attributes improve the security of your connections by helping to protect against vulnerabilities such as man-in-the-middle (MITM) attacks. On the initial boot of a VM instance, if guest attributes are enabled, Compute Engine stores your generated host keys as guest attributes.
Compute Engine then uses these host keys that were stored during the initial boot to verify all subsequent connections to the VM instance.
Ref: https://cloud.google.com/compute/docs/instances/connecting-to-instance Ref: https://cloud.google.com/sdk/gcloud/reference/compute/ssh
NEW QUESTION # 74
You have a developer laptop with the Cloud SDK installed on Ubuntu. The Cloud SDK was installed from the Google Cloud Ubuntu package repository. You want to test your application locally on your laptop with Cloud Datastore. What should you do?
- A. Install the cloud-datastore-emulator component using the gcloud components install command.
- B. Export Cloud Datastore data using gcloud datastore export.
- C. Install the google-cloud-sdk-datastore-emulator component using the apt get install command.
- D. Create a Cloud Datastore index using gcloud datastore indexes create.
Answer: A
Explanation:
The Datastore emulator provides local emulation of the production Datastore environment. You can use the emulator to develop and test your application locally Ref: https://cloud.google.com/datastore/docs/tools/datastore-emulator
NEW QUESTION # 75
You are developing a new web application that will be deployed on Google Cloud Platform. As part of your release cycle, you want to test updates to your application on a small portion of real user traffic. The majority of the users should still be directed towards a stable version of your application. What should you do?
- A. Deploy the application on Kubernetes Engine.
For a now release, create a new deployment for the new version Update the service e to use the now deployment. - B. Deploy me application on App Engine.
For each update, create a new version of the same service.
Configure traffic splitting to send a small percentage of traffic to the new version - C. Deploy the application on Kubernetes Engine.
For a new release, update the deployment to use the new version - D. Deploy the application on App Engine.
For each update, create a new service.
Configure traffic splitting to send a small percentage of traffic to the new service.
Answer: B
Explanation:
When deploying new versions you can split traffic for A/B testing to see how user base reacts to changes.
NEW QUESTION # 76
You need to run an important query in BigQuery but expect it to return a lot of records. You want to find out how much it will cost to run the query. You are using on-demand pricing. What should you do?
- A. Arrange to switch to Flat-Rate pricing for this query, then move back to on-demand.
- B. Use the command line to run a dry run query to estimate the number of bytes read. Then convert that bytes estimate to dollars using the Pricing Calculator.
- C. Use the command line to run a dry run query to estimate the number of bytes returned. Then convert that bytes estimate to dollars using the Pricing Calculator.
- D. Run a select count (*) to get an idea of how many records your query will look through. Then convert that number of rows to dollars using the Pricing Calculator.
Answer: B
NEW QUESTION # 77
Your company runs its Linux workloads on Compute Engine instances. Your company will be working with a new operations partner that does not use Google Accounts. You need to grant access to the instances to your operations partner so they can maintain the installed tooling. What should you do?
- A. Set up Cloud VPN between your Google Cloud VPC and the internal network of the operations partner.
- B. Ask the operations partner to generate SSH key pairs, and add the public keys to the VM instances.
- C. Tag all the instances with the same network tag. Create a firewall rule in the VPC to grant TCP access on port 22 for traffic from the operations partner to instances with the network tag.
- D. Enable Cloud IAP for the Compute Engine instances, and add the operations partner as a Cloud IAP Tunnel User.
Answer: B
Explanation:
Explanation
IAP controls access to your App Engine apps and Compute Engine VMs running on Google Cloud. It leverages user identity and the context of a request to determine if a user should be allowed access. IAP is a building block toward BeyondCorp, an enterprise security model that enables employees to work from untrusted networks without using a VPN.
By default, IAP uses Google identities and IAM. By leveraging Identity Platform instead, you can authenticate users with a wide range of external identity providers, such as:
Email/password
OAuth (Google, Facebook, Twitter, GitHub, Microsoft, etc.)
SAML
OIDC
Phone number
Custom
Anonymous
This is useful if your application is already using an external authentication system, and migrating your users to Google accounts is impractical.
https://cloud.google.com/iap/docs/using-tcp-forwarding#grant-permission
NEW QUESTION # 78
......
Google Associate-Cloud-Engineer certification is highly valued in the cloud computing industry, as it demonstrates the candidate's ability to effectively use Google Cloud Platform to create and manage cloud-based solutions. Google Associate Cloud Engineer Exam certification is also an excellent way to validate one's skills and knowledge, making it a valuable asset for individuals seeking employment in the cloud computing field.
Updated and Accurate Associate-Cloud-Engineer Questions for passing the exam Quickly: https://www.passexamdumps.com/Associate-Cloud-Engineer-valid-exam-dumps.html
Download Real Associate-Cloud-Engineer Exam Dumps for candidates. 100% Free Dump Files: https://drive.google.com/open?id=1f_IjXFsXquH43EYq5NKr65ZTWaXwY6-K
