Pass Associate-Cloud-Engineer Exam in First Attempt Guaranteed 2023 Dumps!
Associate-Cloud-Engineer Dumps Full Questions - Exam Study Guide
Google Associate-Cloud-Engineer certification exam is an entry-level certification exam that tests an individual's ability to deploy, monitor, and manage GCP projects. Google Associate Cloud Engineer Exam certification exam is ideal for individuals who are looking to start a career in cloud engineering and want to demonstrate their foundational knowledge of GCP. Google Associate Cloud Engineer Exam certification exam covers a variety of topics related to GCP, including cloud services, compute, networking, storage, security, and management. Individuals who earn this certification can expect to have an advantage in the job market and may be able to command higher salaries.
Google Associate-Cloud-Engineer Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
Google Associate Cloud Engineer Certification Exam is a valuable certification that can help individuals boost their career prospects and increase their earning potential. Google Associate Cloud Engineer Exam certification is recognized globally and is highly respected in the cloud computing industry. By obtaining this certification, professionals can demonstrate their ability to design, develop, and manage cloud solutions on the Google Cloud Platform, which can open up numerous job opportunities in various industries. Overall, the Google Associate Cloud Engineer Certification Exam is an excellent choice for professionals who want to enhance their skills and advance their career in cloud computing.
NEW QUESTION # 78
You want to create a new role for your colleagues that will apply to all current and future projects created in your organization. The role should have the permissions of the BigQuery Job User and Cloud Bigtable User roles. You want to follow Google's recommended practices. How should you create the new role?
- A. For one of your projects, in the Google Cloud Platform Console under Roles, select both roles and combine them into a new custom role. Use "gcloud iam promote-role" to promote the role from a project role to an organization role.
- B. For all projects, in the Google Cloud Platform Console under Roles, select both roles and combine them into a new custom role.
- C. For your organization, in the Google Cloud Platform Console under Roles, select both roles and combine them into a new custom role.
- D. Use "gcloud iam combine-roles --global" to combine the 2 roles into a new custom role.
Answer: C
Explanation:
A is not correct because this does not create a new role.
B is not correct because gcloud cannot promote a role to org level.
C is not correct because it's recommended to define the role on the organization level. Also, the role will not be applied on new projects.
D is correct because this creates a new role with the combined permissions on the organization level.
NEW QUESTION # 79
Your company has embraced a hybrid cloud strategy where some of the applications are deployed on Google Cloud. A Virtual Private Network (VPN) tunnel connects your Virtual Private Cloud (VPC) in Google Cloud with your company's on-premises network. Multiple applications in Google Cloud need to connect to an on-premises database server, and you want to avoid having to change the IP configuration in all of your applications when the IP of the database changes.
What should you do?
- A. Query the Compute Engine internal DNS from the applications to retrieve the IP of the database.
- B. Configure the IP of the database as custom metadata for each instance,
- C. Create a private zone on Cloud DNS, and configure the applications with the DNS name.
- D. Configure Cloud NAT for all subnets of your VPC to be used when egressing from the VM instances.
Answer: C
Explanation:
Cloud DNS offers DNS forwarding zones and DNS server policies to allow lookups of DNS names between your on-premises and Google Cloud environment. You have multiple options for configuring DNS forwarding. The following section lists best practices for hybrid DNS setup.
These best practices are illustrated in the Reference architectures for hybrid DNS.
https://cloud.google.com/dns/docs/best-
practices#best_practices_for_dns_forwarding_zones_and_server_policies
NEW QUESTION # 80
You are using Container Registry to centrally store your company's container images in a separate project. In another project, you want to create a Google Kubernetes Engine (GKE) cluster. You want to ensure that Kubernetes can download images from Container Registry. What should you do?
- A. Create a service account, and give it access to Cloud Storage. Create a P12 key for this service account and use it as an imagePullSecrets in Kubernetes.
- B. When you create the GKE cluster, choose the Allow full access to all Cloud APIs option under
`Access scopes'. - C. Configure the ACLs on each image in Cloud Storage to give read-only access to the default Compute Engine service account.
- D. In the project where the images are stored, grant the Storage Object Viewer IAM role to the service account used by the Kubernetes nodes.
Answer: D
Explanation:
If the cluster is in a different project or if the VMs in the cluster use a different service account, you must grant the service account the appropriate permissions to access the storage bucket used by Container Registry.
For the service account used by Compute Engine VMs, including VMs in Google Kubernetes Engine clusters, access is based on both Cloud IAM permissions and storage access scopes.
https://cloud.google.com/container-registry/docs/access-control
https://cloud.google.com/container-registry/docs/using-with-google-cloud-platform
NEW QUESTION # 81
30. You are running multiple microservices in a Kubernetes Engine cluster. One microservice is rendering images. The microservice responsible for the image rendering requires a large amount of CPU time compared to the memory it requires. The other microservices are workloads that are optimized for n1-standard machine types. You need to optimize your cluster so that all workloads are using resources as efficiently as possible. What should you do?
- A. Assign the pods of the image rendering microservice a higher pod priority than the older microservices
- B. Configure the required amount of CPU and memory in the resource requests specification of the image rendering microservice deployment Keep the resource requests for the other microservices at the default
- C. Create a node pool with compute-optimized machine type nodes for the image rendering microservice Use the node pool with general-purpose machine type nodes for the other microservices
- D. Use the node pool with general-purpose machine type nodes for lite mage rendering microservice Create a nodepool with compute-optimized machine type nodes for the other microservices
Answer: C
NEW QUESTION # 82
You need to assign a Cloud Identity and Access Management (Cloud IAM) role to an external auditor. The auditor needs to have permissions to review your Google Cloud Platform (GCP) Audit Logs and also to review your Data Access logs. What should you do?
- A. Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission.
Perform the export of logs to Cloud Storage. - B. Assign the auditor's IAM user to a custom role that has logging.privateLogEntries.list permission.
Direct the auditor to also review the logs for changes to Cloud IAM policy. - C. Assign the auditor the IAM role roles/logging.privateLogViewer.
Perform the export of logs to Cloud Storage. - D. Assign the auditor the IAM role roles/logging.privateLogViewer.
Direct the auditor to also review the logs for changes to Cloud IAM policy.
Answer: D
NEW QUESTION # 83
You are building a pipeline to process time-series dat
a. Which Google Cloud Platform services should you put in boxes 1,2,3, and 4?
- A. Cloud Pub/Sub, Cloud Dataflow, Cloud Bigtable, BigQuery
- B. Cloud Pub/Sub, Cloud Dataflow, Cloud Datastore, BigQuery
- C. Cloud Pub/Sub, Cloud Storage, BigQuery, Cloud Bigtable
- D. Firebase Messages, Cloud Pub/Sub, Cloud Spanner, BigQuery
Answer: A
Explanation:
Reference:
https://cloud.google.com/blog/products/data-analytics/handling-duplicate-data-in-streaming-pipeline-using-pubsub-dataflow
https://cloud.google.com/bigtable/docs/schema-design-time-series
NEW QUESTION # 84
You have just created a new project which will be used to deploy a globally distributed application. You will use Cloud Spanner for data storage. You want to create a Cloud Spanner instance. You want to perform the first step in preparation of creating the instance. What should you do?
- A. Create a new VPC network with subnetworks in all desired regions
- B. Configure your Cloud Spanner instance to be multi-regional
- C. Enable the Cloud Spanner API
- D. Grant yourself the IAM role of Cloud Spanner Admin
Answer: C
Explanation:
https://cloud.google.com/spanner/docs/getting-started/set-up
NEW QUESTION # 85
You have been asked to create robust Virtual Private Network (VPN) connectivity between a new Virtual Private Cloud (VPC) and a remote site. Key requirements include dynamic routing, a shared address space of 10.19.0.1/22, and no overprovisioning of tunnels during a failover event. You want to follow Google-recommended practices to set up a high availability Cloud VPN. What should you do?
- A. Use a custom mode VPC network use Cloud Router border gateway protocol (86P) routes, and use active/passive routing
- B. Use an automatic mode VPC network, configure static routes, and use active/active routing
- C. Use an automatic mode VPC network, use Cloud Router border gateway protocol (BGP) routes and configure policy-based routing
- D. Use a custom mode VPC network, configure static routes, and use active/passive routing
Answer: A
Explanation:
https://cloud.google.com/network-connectivity/docs/vpn/concepts/best-practices
NEW QUESTION # 86
You need to enable traffic between multiple groups of Compute Engine instances that are currently running two different GCP projects. Each group of Compute Engine instances is running in its own VPC. What should you do?
- A. Verify that both projects are in a GCP Organization. Create a new VPC and add all instances.
- B. Verify that you are the Project Administrator of both projects. Create a new VPC and add all instances.
- C. Verify that both projects are in a GCP Organization. Share the VPC from one project and request that the Compute Engine instances in the other project use this shared VPC.
- D. Verify that you are the Project Administrator of both projects. Create two new VPCs and add all instances.
Answer: C
Explanation:
Shared VPC allows an organization to connect resources from multiple projects to a common Virtual Private Cloud (VPC) network, so that they can communicate with each other securely and efficiently using internal IPs from that network. When you use Shared VPC, you designate a project as a host project and attach one or more other service projects to it. The VPC networks in the host project are called Shared VPC networks. Eligible resources from service projects can use subnets in the Shared VPC network
https://cloud.google.com/vpc/docs/shared-vpc
"For example, an existing instance in a service project cannot be reconfigured to use a Shared VPC network, but a new instance can be created to use available subnets in a Shared VPC network."
NEW QUESTION # 87
You have a batch workload that runs every night and uses a large number of virtual machines (VMs). It is fault-tolerant and can tolerate some of the VMs being terminated. The current cost of VMs is too high.
What should you do?
- A. Run a test using simulated maintenance events.
If the test is successful, use N1 Standard VMs when running future jobs. - B. Run a test using a managed instance group.
If the test is successful, use N1 Standard VMs in the managed instance group when running future jobs. - C. Run a test using N1 standard VMs instead of N2.
If the test is successful, use N1 Standard VMs when running future jobs. - D. Run a test using simulated maintenance events.
If the test is successful, use preemptible N1 Standard VMs when running future jobs.
Answer: D
Explanation:
Creating and starting a preemptible VM instance
This page explains how to create and use a preemptible virtual machine (VM) instance. A preemptible instance is an instance you can create and run at a much lower price than normal instances. However, Compute Engine might terminate (preempt) these instances if it requires access to those resources for other tasks. Preemptible instances will always terminate after 24 hours. To learn more about preemptible instances, read the preemptible instances documentation.
Preemptible instances are recommended only for fault-tolerant applications that can withstand instance preemptions. Make sure your application can handle preemptions before you decide to create a preemptible instance. To understand the risks and value of preemptible instances, read the preemptible instances documentation.
https://cloud.google.com/compute/docs/instances/create-start-preemptible-instance
NEW QUESTION # 88
Your company has a mission-critical application that serves users globally. You need to select a transactional, relational data storage system for this application. Which two products should you consider
- A. Cloud SQL
- B. Cloud Spanner
- C. Cloud Datastore
- D. Cloud Bigtable
- E. BigQuery
Answer: A,B
Explanation:
A is not correct because BigQuery is not a transactional system.
B is correct because Cloud SQL is a relational and transactional database in the list.
C Is correct because Spanner is a relational and transactional database in the list.
D is not correct because Cloud Bigtable provides transactional support but it's not relational.
E Is not correct because Datastore is not a relational data storage system.
NEW QUESTION # 89
The core business of your company is to rent out construction equipment at a large scale. All the equipment that is being rented out has been equipped with multiple sensors that send event information every few seconds. These signals can vary from engine status, distance traveled, fuel level, and more. Customers are billed based on the consumption monitored by these sensors. You expect high throughput - up to thousands of events per hour per device - and need to retrieve consistent data based on the time of the event. Storing and retrieving individual signals should be atomic. What should you do?
- A. Create a file in Cloud Storage per device and append new data to that file.
- B. Ingest the data into Cloud Bigtable. Create a row key based on the event timestamp.
- C. Ingest the data into Datastore. Store data in an entity group based on the device.
- D. Create a file in Cloud Filestore per device and append new data to that file.
Answer: B
NEW QUESTION # 90
Every employee of your company has a Google account. Your operational team needs to manage a large number of instances on Compute Engine. Each member of this team needs only administrative access to the servers. Your security team wants to ensure that the deployment of credentials is operationally efficient and must be able to determine who accessed a given instance. What should you do?
- A. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key in the metadata of each instance.
- B. Generate a new SSH key pair. Give the private key to each member of your team. Configure the public key as a project-wide public SSH key in your Cloud Platform project and allow project-wide public SSH keys on each instance.
- C. Ask each member of the team to generate a new SSH key pair and to add the public key to their Google account. Grant the "compute.osAdminLogin" role to the Google group corresponding to this team.
- D. Ask each member of the team to generate a new SSH key pair and to send you their public key. Use a configuration management tool to deploy those keys on each instance.
Answer: C
Explanation:
https://cloud.google.com/compute/docs/instances/managing-instance-access
NEW QUESTION # 91
You are building an archival solution for your data warehouse and have selected Cloud Storage to archive your dat a. Your users need to be able to access this archived data once a quarter for some regulatory requirements. You want to select a cost-efficient option. Which storage option should you use?
- A. Coldline Storage
- B. Multi-Regional Storage
- C. Regional Storage
- D. Nearline Storage
Answer: A
Explanation:
Coldline Storage is a very-low-cost, highly durable storage service for storing infrequently accessed data. Coldline Storage is ideal for data you plan to read or modify at most once a quarter. Since we have a requirement to access data once a quarter and want to go with the most cost-efficient option, we should select Coldline Storage.
Ref: https://cloud.google.com/storage/docs/storage-classes#coldline
NEW QUESTION # 92
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted.
You want to migrate this workload to the cloud while minimizing cost. What should you do?
- A. Migrate the workload to a Compute Engine Preemptible VM.
- B. Migrate the workload to a Compute Engine VM.
Start and stop the instance as needed. - C. Create an Instance Template with Preemptible VMs On.
Create a Managed Instance Group from the template and adjust Target CPU Utilization.
Migrate the workload. - D. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
Answer: D
Explanation:
https://cloud.google.com/kubernetes-engine/docs/tutorials/migrating-node-pool
NEW QUESTION # 93
Your company runs one batch process in an on-premises server that takes around 30 hours to complete. The task runs monthly, can be performed offline, and must be restarted if interrupted. You want to migrate this workload to the cloud while minimizing cost. What should you do?
- A. Migrate the workload to a Compute Engine Preemptible VM.
- B. Migrate the workload to a Google Kubernetes Engine cluster with Preemptible nodes.
- C. Create an Instance Template with Preemptible VMs On. Create a Managed Instance Group from the template and adjust Target CPU Utilization. Migrate the workload.
- D. Migrate the workload to a Compute Engine VM. Start and stop the instance as needed.
Answer: C
Explanation:
Install the workload in a compute engine VM, start and stop the instance as needed, because as per the question the VM runs for 30 hours, process can be performed offline and should not be interrupted, if interrupted we need to restart the batch process again. Preemptible VMs are cheaper, but they will not be available beyond 24hrs, and if the process gets interrupted the preemptible VM will restart.
NEW QUESTION # 94
You need to set a budget alert for use of Compute Engineer services on one of the three Google Cloud Platform projects that you manage. All three projects are linked to a single billing account. What should you do?
- A. Verify that you are the project billing administrator. Select the associated billing account and create a budget and alert for the appropriate project.
- B. Verify that you are project administrator. Select the associated billing account and create a budget and a custom alert.
- C. Verify that you are the project billing administrator. Select the associated billing account and create a budget and a custom alert.
- D. Verify that you are the project administrator. Select the associated billing account and create a budget for the appropriate project.
Answer: A
Explanation:
https://cloud.google.com/iam/docs/understanding-roles#billing-roles
NEW QUESTION # 95
You have an application server running on Compute Engine in the europe-west1-d zone. You need to ensure high availability and replicate the server to the europe-west2-c zone using the fewest steps possible. What should you do?
- A. Use "gcloud compute instances move" with parameter "--destination-zone europe-west2-c" to move the instance to the new zone.
- B. Create a snapshot from the disk. Create a disk from the snapshot in the europe-west1-d zone and then move the disk to europe-west2-c. Create a new VM with that disk.
- C. Use "gcloud" to copy the disk to the europe-west2-c zone. Create a new VM with that disk.
- D. Create a snapshot from the disk. Create a disk from the snapshot in the europe-west2-c zone.
Create a new VM with that disk.
Answer: D
Explanation:
A is correct because this makes sure the VM gets replicated in the new zone.
B is not correct because this takes more steps than A.
C is not correct because this will generate an error, because gcloud cannot copy disks.
D is not correct because the original VM will be moved, not replicated.
NEW QUESTION # 96
You have an application running in Google Kubernetes Engine (GKE) with cluster autoscaling enabled. The application exposes a TCP endpoint. There are several replicas of this application. You have a Compute Engine instance in the same region, but in another Virtual Private Cloud (VPC), called gce-network, that has no overlapping IP ranges with the first VPC. This instance needs to connect to the application on GKE. You want to minimize effort. What should you do?
- A. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add an annotation to this service: cloud.google.com/load-balancer-type: Internal3. Peer the two VPCs together.4. Configure the Compute Engine instance to use the address of the load balancer that has been created.
- B. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Add a Cloud Armor Security Policy to the load balancer that whitelists the internal IPs of the MIG's instances.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
- C. 1. In GKE, create a Service of type NodePort that uses the application's Pods as backend.2. Create a Compute Engine instance called proxy with 2 network interfaces, one in each VPC.3. Use iptables on this instance to forward traffic from gce-network to the GKE nodes.4. Configure the Compute Engine instance to use the address of proxy in gce-network as endpoint.
- D. 1. In GKE, create a Service of type LoadBalancer that uses the application's Pods as backend.2. Set the service's externalTrafficPolicy to Cluster.3. Configure the Compute Engine instance to use the address of the load balancer that has been created.
Answer: D
NEW QUESTION # 97
You have created a new project in Google Cloud through the gcloud command line interface (CLI) and linked a billing account. You need to create a new Compute Engine instance using the CLI. You need to perform the prerequisite steps. What should you do?
- A. Grant yourself the IAM role of Computer Admin.
- B. Create a Cloud Monitoring Workspace.
- C. Create a VPC network in the project.
- D. Enable the compute googleapis.com API.
Answer: A
NEW QUESTION # 98
You need to set up permissions for a set of Compute Engine instances to enable them to write data into a particular Cloud Storage bucket. You want to follow Google-recommended practices. What should you do?
- A. Create a service account and add it to the IAM role 'storage.objectAdmin' for that bucket.
- B. Create a service account and add it to the IAM role 'storage.objectCreator' for that bucket.
- C. Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/devstorage.write_only'.
- D. Create a service account with an access scope. Use the access scope 'https://www.googleapis.com/auth/cloud-platform'.
Answer: B
Explanation:
https://cloud.google.com/iam/docs/understanding-service-accounts#using_service_accounts_with_compute_engine
https://cloud.google.com/storage/docs/access-control/iam-roles
NEW QUESTION # 99
You are migrating a production-critical on-premises application that requires 96 vCPUs to perform its task. You want to make sure the application runs in a similar environment on GCP. What should you do?
- A. When creating the VM, use Intel Skylake as the CPU platform.
- B. Create the VM using Compute Engine default settings. Use gcloud to modify the running instance to have
96 vCPUs. - C. Start the VM using Compute Engine default settings, and adjust as you go based on Rightsizing Recommendations.
- D. When creating the VM, use machine type n1-standard-96.
Answer: B
NEW QUESTION # 100
You are running a data warehouse on BigQuery. A partner company is offering a recommendation engine based on the data in your data warehouse. The partner company is also running their application on Google Cloud. They manage the resources in their own project, but they need access to the BigQuery dataset in your project. You want to provide the partner company with access to the dataset. What should you do?
- A. Create a Service Account in your own project, and ask the partner to grant this Service Account access to BigQuery in their project.
- B. Create a Service Account in your own project, and grant this Service Account access to BigQuery in your project.
- C. Ask the partner to create a Service Account in their project, and have them give the Service Account access to BigQuery in their project.
- D. Ask the partner to create a Service Account in their project, and grant their Service Account access to the BigQuery dataset in your project.
Answer: D
NEW QUESTION # 101
......
Google Cloud Certified Free Certification Exam Material from Free4Torrent with 229 Questions: https://dumpspdf.free4torrent.com/Associate-Cloud-Engineer-valid-dumps-torrent.html